On 22/06/2025 at 01:24, Alex. I. TRIPCEA wrote:
If I choose firmware UEFI x86_64: /usr/share/OVMF/OVMF_CODE_4M.secboot.fd
at installation, then after installation, the system boot without problems.
if, instead, I leave the default value - UEFI - then after instalation the
system remains at grub prompt.
Did you check secure boot status with both setups ?
You can just boot the installation ISO, press "c" at GRUB menu to enter
GRUB prompt, run the command "set" and check if "shim_lock=y" is present
in the output.
According to /usr/share/doc/ovmf/README.Debian, OVMF_CODE_4M.secboot.fd
supports secure boot but has it disabled by default, without any keys.
OVMF_CODE_4M.ms.fd has secure boot enabled with Microsoft keys by default.
