2

IF YOU ARE NOT SURE, PLEASE DO GIVE YOUR THOUGHTS ON THIS

After installing Ubuntu, if we install a graphics driver for dedicated graphics card then we need to enroll a MOK to the firmware. As far as I understand, the key I enroll should go into the ROM. I generally keep installing and uninstalling Linux. When I remove the Linux partition, the MOK should still be there in the firmware according to me. And when I install Linux again then if I generate a new MOK, then it would also go into the firmware.

Can I OR should I do this multiple times without any issues. I feel, like this, there would be a lot of garbage MOKs in the firmware.

What should be done in such a case? Should the MOK be deleted before removing Linux? If yes, then how? If we don't remove the MOK before removing Linux, is there a way to remove it outside it?

I've seen this post : Is it possible to delete an enrolled key using mokutil without the original .der file? But I don't exactly get how it works.

I think I don't clearly understand where the key is stored.

I want to understand this MOK concept and know how to deal with it in case of a machine where I may be continuously removing and installing Linux and each time I'll install the graphics driver too.

Pera
  • 21
  • 2

0 Answers0