# GRUB & Secure Boot **URL:** \ **Category:** Newbie\ **Created:** [March 13, 2025, 6:12pm UTC](https://forum.endeavouros.com/t/grub-secure-boot/69014 "2025-03-13T18:12:31Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![xii69](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/xii69/32/101721_2.png) [@xii69](https://forum.endeavouros.com/u/xii69)\ **Post date:** [March 13, 2025, 6:12pm UTC](https://forum.endeavouros.com/t/grub-secure-boot/69014/1 "2025-03-13T18:12:31Z")
I’ve lost count of how many times I’ve asked for help here or in other communities. No matter what I do, I can’t seem to get GRUB working with Secure Boot. Every time I install Linux, I encounter the error: _“error: prohibited by secure boot policy”_ when trying to boot into GRUB with Secure Boot enabled. Believe it or not, I’ve read and tried every single post, guide, and wiki related to this issue. I’m certain that I’m the one causing the system to become unbootable with Secure Boot, So, instead of sharing wiki links, could someone please point out where I might be going wrong or guide me step-by-step? I’d really appreciate it ---
**Author:** ![keescase](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/keescase/32/114900_2.png) [@keescase](https://forum.endeavouros.com/u/keescase)\ **Post date:** [March 13, 2025, 6:16pm UTC](https://forum.endeavouros.com/t/grub-secure-boot/69014/2 "2025-03-13T18:16:29Z")
You can find Secure Boot in the BIOS , Eos doesn’t support it so you need to disable it together with Fast Boot in your BIOS. ---
**Author:** ![cactux](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/cactux/32/134907_2.png) [@cactux](https://forum.endeavouros.com/u/cactux)\ **Post date:** [March 13, 2025, 6:16pm UTC](https://forum.endeavouros.com/t/grub-secure-boot/69014/3 "2025-03-13T18:16:42Z")
> [@xii69](#): > > So, instead of sharing wiki links, could someone please point out where I might be going wrong I think you need to show all the steps you have done if someone may be able to tell where you have gone wrong. ---
**Author:** ![xii69](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/xii69/32/101721_2.png) [@xii69](https://forum.endeavouros.com/u/xii69)\ **Post date:** [March 13, 2025, 6:18pm UTC](https://forum.endeavouros.com/t/grub-secure-boot/69014/4 "2025-03-13T18:18:05Z")
I’m dual booting with Windows, I need secure boot just and just for playing some games on Windows, the games close themselves if they detect that I can have Secure Boot enabled and I don’t (and still they can’t stop cheaters, they just stop me to play the game while I’ve Linux installed) I’m currenly switching boot orders between grub and windows boot manager and switching secure boot state each time i need to play games ---
**Author:** ![xii69](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/xii69/32/101721_2.png) [@xii69](https://forum.endeavouros.com/u/xii69)\ **Post date:** [March 13, 2025, 6:20pm UTC](https://forum.endeavouros.com/t/grub-secure-boot/69014/5 "2025-03-13T18:20:13Z")
I’ve tried both GRUB and rEFInd as my boot loader I’ve tried disabling some sort of stuff by command to make GRUB pass the error I’ve tried to create my own keys and import them in motherboard while they’re in a USB stick I’ve tried to use sbctl to create and enroll keys + signing files and many that I don’t remember, I remembered this because I’ve done them at least 5 times without success ---
**Author:** ![ricklinux](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/ricklinux/32/110798_2.png) [@ricklinux](https://forum.endeavouros.com/u/ricklinux)\ **Post date:** [March 13, 2025, 6:56pm UTC](https://forum.endeavouros.com/t/grub-secure-boot/69014/6 "2025-03-13T18:56:11Z")
> **[GRUB - ArchWiki](https://wiki.archlinux.org/title/GRUB#Secure_Boot_support)** ---
**Author:** ![xii69](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/xii69/32/101721_2.png) [@xii69](https://forum.endeavouros.com/u/xii69)\ **Post date:** [March 14, 2025, 7:53am UTC](https://forum.endeavouros.com/t/grub-secure-boot/69014/7 "2025-03-14T07:53:28Z")
FINALLY! thanks ![image](https://forum.endeavouros.com/uploads/default/original/3X/2/1/21c1c2a6dec63afd15aec5576aa5298302ebe90d.jpeg) ---
**Author:** ![xii69](https://forum.endeavouros.com/user_avatar/forum.endeavouros.com/xii69/32/101721_2.png) [@xii69](https://forum.endeavouros.com/u/xii69)\ **Post date:** [March 14, 2025, 7:57am UTC](https://forum.endeavouros.com/t/grub-secure-boot/69014/8 "2025-03-14T07:57:16Z")
My problem was: 1- I didn’t install grub correctly to support secure boot, correct installation command: ```auto grub-install --target=x86_64-efi --efi-directory=/boot --bootloader-id=GRUB --modules="tpm" --disable-shim-lock ``` 2- I didn’t disabled “idk what validation” with `mokutil --disable-validation` ---
**Author:** ![system](https://forum.endeavouros.com/uploads/default/original/2X/9/9ea52f9fd5ef8e609e593c362d61a36295f48be8.png) [@system](https://forum.endeavouros.com/u/system)\ **Post date:** [March 16, 2025, 7:57am UTC](https://forum.endeavouros.com/t/grub-secure-boot/69014/9 "2025-03-16T07:57:24Z")
Closed on March 16, 2025, 7:57am UTC This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.