I did an update on a 13.2 test installation today and wound up with a messed
up GRUB on the reboot following the update. The boot pops up a window
complaining about a bad security key. Boot from Win 8.1, USB key, or DVD
works fine.
The machine has 2 working installations of 13.1 on the disk as well as the
test partition so what I really need to do is to restore GRUB from one of
those 2 good installations.
Details:
Intel I7, 1 Tb drive, with boot to Win8.1 as well as openSUSE so EFI secure
boot is required. For reference, I would prefer to restore the boot from the
sda9 partition - but I’ll take what I can get to work.
Can someone give me a quick “for dummies” set of steps to get back up and
running on one of the good partitions? I’ll fight the 13.2 issues later!
It has nothing to do with grub2. shim (bootloader used for secure boot) was changed but not re-signed. The simplest solution is to disable secure boot in your motherboard settings until this gets fixed.
And please, in the future post questions about not yet released version in beta forum. There is no version 13.2 for now, it is only development snapshots.
> … still, it is not Grub, but the EFI/Secure boot signature that is
> messed up.
>
Right. I’m thinking that the simplest, safest, and probably the fastest way
to do this is to simply install 13.1 clean on the test partition. KISS - I
know that works. The first issue I hit was the grub2-install to an EFI gpt
disk. Man is a bit lacking there.
Just turn off secure boot. It seems you have the 13.2 beta as the boot control and there is an apparent problem with the credentials there. I guess the alternative is to re install (note update) one of the 13.1 installations to make it the boot controller. You can avoid the reinstall entirly by turning off secure boot boot the machine to a 13.1 and re initializing grub via yast or grub2-install. You can re turn on the secure boot. but it really makes no sense at all on a pure Linux machine. It is of questionable use on a dual boot.
The latest factory update has a bad shim. They appear to have updated shim before getting it signed by Microsoft.
Copying just the “shim.efi” file from 13.1 into “/boot/efi/EFI/opensuse” should fix it (until it is broken again). Or just turn off secure-boot for the time being.