After a shim update yesterday, no longer able to boot with secure boot enabled

and these two also show up in the linux kernel only on opensuse leap 15 and tumbleweed, debian and ubuntu linux distro’s

SGX disabled by BIOS. 

Now I know I can edit grub and add in rmmod tpm which would remove that tpm_crb thing, but the two other error I am not sure can be removed by a setting in grub that I know of.

the other thing I seen in Opensuse leap is

Device booted in 11739 usecs
***Bluetooth: hci0: Malformed MSFT vendor event: 0x02***
found Intel DDC parameters completed
firmware revision 0.0 build 14 week 44 2021
MGMT ver 1.22 

its in red under dmesg but I read online that even thought these on in red they don’t effect the linux distro??
I don’t think it has anything to do with shim but it does only show up on three linux distro types, ubuntu , debian and opensuse, but fedora and arch linux based distros don’t have these kernel error,

I used garuda-dr460nized arch based and manjaro kde builds if I recall the arch linux doesn’t get the kernel bootup error like opensuse does. also since they only work with secure boot off, I don’t know or think they are affected by shim yet, but fedora works with secure boot on still and is not affected by this shim problem that opensuse seems to have. which is related to the problem reported below.

1209985 – Secure boot violation when install Leap shim and Tumbleweed shim in one machine (opensuse.org)