Installing the Linux Nvidia driver in secure boot mode / Manually enrolling a platform key in BIOS

My Asrock Fatal1ty X470 AC BIOS is broken or does not work correctly in conjunction with my Nvidia GTX 1660 Ti, as I can’t see the screen to enroll a platform key. This is necessary if you want to install e.g. the proprietary Nvidia driver with secure boot on. I read some threads here, here and here, but that didn’t work for me. Here’s what I did:

Copy the platform key to a USB stick. Either from /var/lib/shim-signed/mok/MOK.der directly after installing the driver (via Ubuntu/Drivers) in secure boot mode. Or, when installing the driver (via Downloaded .run file) from command line, pass the option “–module-signing-public-key” to get a platform key and copy that to USB.

sudo sh ./ -s --module-signing-secret-key=PATH_TO_PRIVATE_KEY --module-signing-public-key=PATH_TO_PUBLIC_KEY

Then reboot, enter the BIOS, enter secure boot management and add your key file from the USB stick as an “allowed signature”.

Published by HorstBaerbel

Software developer by trade and interest, but I venture into the electronics- and diy-world from time to time.

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

Create your website with
Get started
%d bloggers like this: