Enabling secure boot with Windows 11 Dual boot using Grub

General system Newbie
1

Hey, was wondering if there was a well documented way on enabling secure boot for endeavour + windows dual boot using grub. I don’t mind switching to other boot loader if needed. I don’t really care about the security benefits, I simply need secure boot enabled for some applications on Windows 11 to work.

Thanks :slight_smile:

2

The documentation on that is here:

https://wiki.archlinux.org/title/Unified_Extensible_Firmware_Interface/Secure_Boot

3

@hacker

Welcome to the EndeavourOS forum. I hope you enjoy your time here.

Let us know if you get secure boot going.

Pudge

4

Good news: definitely possible
Bad news: a bit complicated

My experience is that achieving Secureboot with Grub is annoying. Even if you get your UEFI to load grubx64.efi, Grub will complain when trying to load modules.

One solution might be to create a unified kernel image. Set up Preloader in your EFI system partition to load the unified kernel image. Create a boot entry for PreLoader.efi. Enable Secureboot. Enroll the hash of the unified kernel image on first boot.