My keys were fine, I’d used them on a previous system. My best guess is boot failed because GPU firmware wasn’t signed with my keys, only Microsoft’s keys. And of course, I can’t just CMOS clear, and I don’t have an iGPU. It’s crazy that an OS can brick my motherboard; I’d be a lot more forgiving if a BIOS option bricked it, but exposing a “brick me” option in efivars for any ring 0 software to press??
Yes, as long as you get the option to disable it. And use custom keys.
It’s uh, more secure.
I enrolled custom keys and bricked my motherboard 🙃
Same. Should’ve listened to securebootctl telling me the key was malformed.
My keys were fine, I’d used them on a previous system. My best guess is boot failed because GPU firmware wasn’t signed with my keys, only Microsoft’s keys. And of course, I can’t just CMOS clear, and I don’t have an iGPU. It’s crazy that an OS can brick my motherboard; I’d be a lot more forgiving if a BIOS option bricked it, but exposing a “brick me” option in efivars for any ring 0 software to press??
OpROMs?