verifcation failed (0x1A) security violation after Generating a new key & Enrolling your key
by aboongm from LinuxQuestions.org on (#5R2ZZ)
I have a dual boot HP ProDesk SFF intel i5 desktop. It boots both deepin and windows 10. Now I can only boot windows 10. The deepin option is not visible on the boot options of bios.
Today, I did these steps so that I can use DroidCam as webcam. DroidCam installation required some changes in boot key after sudo ./install-video
This is what I did:
wget -O droidcam_latest.zip https://files.dev47apps.net/linux/droidcam_1.8.0.zip
# sha1sum: 3f94d6ec57a191ad146392fcf094b205e375e1ef
unzip droidcam_latest.zip -d droidcam
cd droidcam && sudo ./install-client
sudo apt install linux-headers-`uname -r` gcc make
sudo ./install-video
Then, I got to https://wiki.debian.org/SecureBoot to be able to sign in for what is required for boot key.
Generating a new key
openssl req -new -x509 -newkey rsa:2048 -keyout MOK.priv -outform DER -out MOK.der -days 36500 -subj "/CN=My Name/" -nodes
openssl x509 -inform der -in MOK.der -out MOK.pem
Enrolling your key
sudo mokutil --import MOK.der # prompts for one-time password
sudo mokutil --list-new # recheck your key will be prompted on next boot
after these steps, I reboot. But I could not reboot. It gives a blue screen with verifcation failed (0x1A) security violation.
So, I enter the BIOS and set the windows 10 bootloader as the first option. Also, there is no deepin option on the boot options anymore. I cannot boot from USB either. Trying to boot from USB gives the same verifcation failed (0x1A) security violation.
Today, I did these steps so that I can use DroidCam as webcam. DroidCam installation required some changes in boot key after sudo ./install-video
This is what I did:
wget -O droidcam_latest.zip https://files.dev47apps.net/linux/droidcam_1.8.0.zip
# sha1sum: 3f94d6ec57a191ad146392fcf094b205e375e1ef
unzip droidcam_latest.zip -d droidcam
cd droidcam && sudo ./install-client
sudo apt install linux-headers-`uname -r` gcc make
sudo ./install-video
Then, I got to https://wiki.debian.org/SecureBoot to be able to sign in for what is required for boot key.
Generating a new key
openssl req -new -x509 -newkey rsa:2048 -keyout MOK.priv -outform DER -out MOK.der -days 36500 -subj "/CN=My Name/" -nodes
openssl x509 -inform der -in MOK.der -out MOK.pem
Enrolling your key
sudo mokutil --import MOK.der # prompts for one-time password
sudo mokutil --list-new # recheck your key will be prompted on next boot
after these steps, I reboot. But I could not reboot. It gives a blue screen with verifcation failed (0x1A) security violation.
So, I enter the BIOS and set the windows 10 bootloader as the first option. Also, there is no deepin option on the boot options anymore. I cannot boot from USB either. Trying to boot from USB gives the same verifcation failed (0x1A) security violation.