Is There a Way to Remove the Secure Boot Key I Enrolled

Bazzite
1

While installing Bazzite I enabled Secure Boot. Later figured out problems I’ve been having with my mouse is fixed upon disabling secure boot (it was preventing openrazer daemons from loading properly.)

This makes me wonder, though. Do I still need to remove the key I enrolled (universalblue) or can I just leave it as it is. Is there even a way to remove the key, if so, how can I do it? I understand now that secure boot is really not necessary unless dual booting, which I am not.

Thanks a lot for answers and have a great day.

2

You don’t need to delete the ublue key. However, if you’d like to remove it, you can start by running mokutil --export to export currently enrolled keys. mokutil --list-enrolled will list the keys in the same order as the exported .der files. A mokutil --delete <file-name.der> will mark the key for deletion. IIRC, you’ll need to restart the machine; it should boot into BIOS mok-management section where you can confirm that you want to delete the key (this last part I’m purely going off of my memory).

Check this SO article for more details: https://askubuntu.com/a/813560/119146

3

Thanks a lot for the answer. Since there is no issue leaving the key enrolled, I’ll leave it as is. Who knows, maybe I’ll need to re-enable Secure Boot for some reason in the future.

Much appreciated friend :slight_smile: Have a great day.

4

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.