Hi, I'm trying to enable the secureboot with OVMF. I followed the steps as below. But When I executed LockDown.efi, it gives me an error which says, "Failed to enroll PK: 26". According to UEFI spec, the 26 means EFI_SECURITY_VIOLATION, but I don't understand why I got this error. Before I ran the LockDown.efi, the secureboot was disabled by default and the PK key was not enrolled.
1. Build OVMF with secureboot enable https://wiki.ubuntu.com/UEFI/EDK2 2. Generate/Execute LockDown.efi to enroll PK/KEK/DB keys git://git.kernel.org/pub/scm/linux/kernel/git/jejb/efitools.git I would appreciate any useful information about this error. Thanks, Kyung Min _______________________________________________ edk2-devel mailing list [email protected] https://lists.01.org/mailman/listinfo/edk2-devel

