New kernel no longer asks for MOK password.

Back in June I posted this,, about an MOK password being requested for any and all kernel upgrades. I was never able to pass the check with root’s password, or an MOK password set from the command line. Today’s kernel update was an actual version upgrade, and no MOK password was requested! Apparently, someone fixed this. :slight_smile:


In today’s update, I saw:

Already in kernel trusted keyring. Skip /etc/uefi/certs/".crt

I think that was when it decided not to ask for the key to be added.

You can check the output of

mokutil -l

(doesn’t require root). Look for a key with fingerprint that begins 33CEA71B – or, probably “33:CE:A7:1B”