Visitar URL original
Monitors disabled after secure boot · Issue #506 · Foxboron/sbctl · GitHub
Skip to content

Monitors disabled after secure boot #506

New issue
New issue
Open
Open
Monitors disabled after secure boot#506

Description

@ynot01
ynot01
opened on Jul 29, 2026

Commands run:
sudo /home/********/go/bin/sbctl create-keys
sudo /home/********/go/bin/sbctl setup --migrate
Rebooted and cleared old keys
sudo /home/********/go/bin/sbctl enroll-keys -m
Rebooted and enabled secure boot
sudo /home/********/go/bin/sbctl sign -s <each file>
Rebooted after this but monitors were still broken

Only primary monitor "works" with no info available from xrandr locked to 60hz

Disabling secure boot returns function to normal

Linux Mint/Cinnamon Display app Image
xrandr 
~$ xrandr
Screen 0: minimum 320 x 200, current 1920 x 1080, maximum 4096 x 4096
None-1 connected primary 1920x1080+0+0 (normal left inverted right x axis y axis) 0mm x 0mm
   1920x1080     60.00*+

NVtop no longer reports the RTX 4070 as active, though it seems it's still detected in lshw. The AMD GPU does not list any processes, strangely

sudo lshw -C video 
~$ sudo lshw -C video
  *-display                 
       description: VGA compatible controller
       product: AD104 [GeForce RTX 4070]
       vendor: NVIDIA Corporation
       physical id: 0
       bus info: pci@0000:01:00.0
       logical name: /dev/fb0
       version: a1
       width: 64 bits
       clock: 33MHz
       capabilities: pm msi pciexpress vga_controller cap_list fb
       configuration: depth=32 latency=0 mode=1920x1080 resolution=1920,1080 visual=truecolor xres=1920 yres=1080
       resources: iomemory:f80-f7f iomemory:fc0-fbf memory:fb000000-fbffffff memory:f800000000-fbffffffff memory:fc00000000-fc01ffffff ioport:f000(size=128) memory:fc000000-fc07ffff
  *-display
       description: VGA compatible controller
       product: Raphael
       vendor: Advanced Micro Devices, Inc. [AMD/ATI]
       physical id: 0
       bus info: pci@0000:0d:00.0
       version: c3
       width: 64 bits
       clock: 33MHz
       capabilities: pm pciexpress msi msix vga_controller bus_master cap_list
       configuration: driver=amdgpu latency=0
       resources: iomemory:fc0-fbf iomemory:fc0-fbf irq:60 memory:fc10000000-fc1fffffff memory:fc20000000-fc201fffff ioport:d000(size=256) memory:fca00000-fca7ffff
sbctl verify 
~$ sudo /home/********/go/bin/sbctl verify
old configuration detected. Please use `sbctl setup --migrate`
Verifying file database and EFI images in /boot/efi...
✓ /boot/efi/EFI/Microsoft/Boot/qps-ploc/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/sk-SK/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/ja-JP/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/tr-TR/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/lv-LV/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/nb-NO/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/en-GB/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/fi-FI/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/hr-HR/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/kd_02_8086.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/pl-PL/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/pt-PT/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/sv-SE/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/zh-CN/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/ko-KR/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/lt-LT/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/ro-RO/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/zh-HK/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/et-EE/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/ja-JP/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/ko-KR/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/nl-NL/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/sr-Latn-RS/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/zh-TW/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/hu-HU/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/en-US/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Boot/bootx64.efi is signed
✓ /boot/efi/EFI/Microsoft/Boot/da-DK/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/en-US/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/es-ES/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/nb-NO/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/sv-SE/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Boot/bkpbootx64.efi is signed
✓ /boot/efi/EFI/Microsoft/Boot/bootmgr.efi is signed
✓ /boot/efi/EFI/Microsoft/Boot/memtest.efi is signed
✓ /boot/efi/EFI/Microsoft/Boot/cs-CZ/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/bg-BG/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/de-DE/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/el-GR/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/kd_02_10df.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/pt-BR/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/cs-CZ/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/it-IT/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/sk-SK/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/sr-Latn-RS/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/en-GB/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/Resources/bootres.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/es-MX/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/et-EE/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/es-MX/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/fr-CA/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/fr-FR/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/hu-HU/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/ubuntu/shimx64.efi is signed
✓ /boot/efi/EFI/Microsoft/Boot/el-GR/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/es-ES/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/nl-NL/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/ru-RU/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/da-DK/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/fr-CA/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/kd_02_1414.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/kd_02_15b3.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/uk-UA/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Boot/grubx64.efi is signed
✓ /boot/efi/EFI/Microsoft/Boot/cs-CZ/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/it-IT/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/kd_07_1415.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/lt-LT/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/tr-TR/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Boot/fbx64.efi is signed
✓ /boot/efi/EFI/Boot/mmx64.efi is signed
✓ /boot/efi/EFI/Microsoft/Boot/bg-BG/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/it-IT/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/sl-SI/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/zh-TW/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/fr-FR/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/kd_02_15ad.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/ro-RO/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/kd_02_1137.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/nl-NL/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/pt-PT/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/ubuntu/mmx64.efi is signed
✓ /boot/efi/EFI/Microsoft/Boot/el-GR/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/kdnet_uart16550.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/pl-PL/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/pt-BR/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/ru-RU/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/zh-HK/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/da-DK/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/hr-HR/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/fi-FI/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/ru-RU/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/kd_02_1af4.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/qps-plocm/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/tr-TR/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/fr-FR/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/zh-CN/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/zh-HK/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/fi-FI/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/kd_0C_8086.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/kdstub.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/pl-PL/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/pt-PT/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/sr-Latn-CS/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/zh-CN/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/en-US/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/es-ES/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/hu-HU/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/kd_02_1969.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/nb-NO/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/sl-SI/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/sv-SE/memtest.efi.mui is signed
✓ /boot/efi/EFI/ubuntu/grubx64.efi is signed
✓ /boot/efi/EFI/Microsoft/Boot/ja-JP/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/Resources/en-US/bootres.dll.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/SecureBootRecovery.efi is signed
✓ /boot/efi/EFI/Microsoft/Boot/cbmr_driver.efi is signed
✓ /boot/efi/EFI/Microsoft/Boot/de-DE/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/kd_02_10ec.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/kd_02_14e4.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/ko-KR/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/de-DE/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/kd_02_19a2.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/pt-BR/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/uk-UA/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/zh-TW/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/bootmgfw.efi is signed
✓ /boot/efi/EFI/Microsoft/Boot/lv-LV/bootmgr.efi.mui is signed
sbctl status 
~$ sudo /home/********/go/bin/sbctl status
old configuration detected. Please use `sbctl setup --migrate`
Installed:	✓ sbctl is installed
Owner GUID:	2c748487-d324-4f88-8fe5-884599e22733
Setup Mode:	✓ Disabled
Secure Boot:	✓ Enabled
Vendor Keys:	microsoft
sbctl setup --migrate 
~$ sudo /home/********/go/bin/sbctl setup --migrate
old configuration detected. Please use `sbctl setup --migrate`
sbctl has already been migrated!

Activity

  1. Eightie7 commented on Oct 20, 2026

    @Eightie7
    Eightie7
    on Oct 20, 2026

    In your BIOS settings, not from sbctl, try to see if there’s a way to reset your keys to factory settings.

    -- migrate just moves your keys from /usr/share/secureboot to /var/lib/sbctl as far as I can tell from the man page, so maybe just delete the former directory.

    Create new keys and enroll them with sbctl export-keys --append, and then sign the files you need to sign.

    Hopefully that should work?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions