Hello there, I received a notification to enroll UB key this morning [Screenshot from 2024-09-26 09-15-58] followed the link saying [image] what I get is different… ❯ mokutil --list-enrolled 7e68651d52 Fedora Secure Boot CA 63fe4d8157 ublue akmods\ 2be991e3b1 ublue kernel Is it concerning th…

Hi, first a clarifying question: Did you receive this warning and re-enroll (ujust enroll-secure-boot-key) before checking the output of mokutil --list-enrolled? I want to know if the script is mis-detecting, because it should only run if 2be991e3b1 ublue kernel is missing. Second: 2be991e3b1 ub…

hey @bsherman thanks for asking for clarification, much appreciated. [image] bsherman: Did you receive this warning and re-enroll (ujust enroll-secure-boot-key) before checking the output of mokutil --list-enrolled? Yes that’s exatly what I did: turn laptop on and was greeted by that noti…

hey @j0rge , yes I use latest so I guess that’s why I got this notification today right. I thought I had already enrolled the new key when you published Autumn update: Secure Boot users, make sure you've enrolled our secure boot key … I guess not

Yes that’s exatly what I did: turn laptop on and was greeted by that notification ran ujust enroll-secure-boot-key checked mokutil --list-enrolled and got that result Great! Thank you for confirming! I wanted to make sure this wasn’t a bug report about the notification showing incorrectly. Thi…

Ok, I really appreciate you taking the time to respond to all my questions! Take care Ben :+1:

@bsherman Does the old key have an upcoming expiration date such that it will be universally recognized as invalid? The only reason I’ve seen for switching keys is “security”, so it seems kind of weird that the swap process doesn’t include removing the old key.

Good question. Different dates have been thrown around, but unless I missed it or forgot (which happens), we haven’t picked a hard date for the cutover. In part, this particular rotation of the ublue MOK is a practice run, giving us a chance to walk through it while we are NOT in a crisis. So for…

That all sounds great. Thanks for taking the time to explain it to me even though you’ve probably had to repeat it many times already.

thanks to both of you @MaxJanky and @bsherman for helping to make it more understandable, it really helps :slightly_smiling_face: [image] bsherman: Users are free to remove the old key now, if they choose, if they understand the situation and want to do it themselves Just to make sure of the…

Are you on AZERTY, by chance? This came up in a similar thread recently and evidently the MoKUtil stuff only understands QWERTY.

Mokutil --list-enrolled explanation

Bluefin

Bambiraptor October 3, 2024, 7:14pm 17

@twojays @Malix,
check those 2 links, it should be all you need:

Topic		Replies	Views
Mokutil output is not what it should be in Aurora General	6	171	September 10, 2024
Secure boot key / MOK management General	15	5719	October 6, 2024
Secure Boot Notice Bazzite announcements	18	13335	August 23, 2024
Error enrolling secure boot key Bluefin	6	727	September 28, 2024
Bluefin LTS - Secure boot enrollment issue General	1	96	March 10, 2026

Mokutil --list-enrolled explanation

Related topics