Unable to sign Nvidia drivers for secure boot

English Hardware
1

Hello everyone!

I recently installed OpenSuse Tumbleweed on my laptop in dual boot with Windows 11. I need secure boot and have a Nvidia GTX 1650 graphic card.

After using Tumbleweed a little bit, I noticed that I couldn’t use the second monitor for some reason; I then tried to install the Nvidia drivers, but after the reboot I couldn’t get any GUI, the boot sequence got “stuck” and I could only switch to a terminal.

After searching on the web, I discovered that the Nvidia drivers need to be signed during the installation and the signing key must be validated after the reboot using the MOK tool.

Unfortunately, it seems that in my case the driver doesn’t get signed.

Looking at the official documentation, I should find the signing key under /var/lib/nvidia-pubkeys, but that folder doesn’t exist, so I don’t know how to enable it in MOK.

These are the packages I installed are:

nvidia-glG06 x11-video-nvidiaG06 libnvidia-egl-wayland1 nvidia-computeG06 nvidia-gfxG06-kmp-default nvidia-glG06 x11-video-nvidiaG06

After rebooting, dmesg shows:

nvidia: module verification failed: signature and/or required key missing - tainting kernel

I’ve currently disable secure boot as a temporary workaround, but I would like to find a better fix. Do you know why the drivers are not getting signed?

Thanks a lot!

2

I finally found a solution.

First of all, a premise: after some experiments I noted that the driver x11-video-nvidiaG06 was not working properly even though I disabled the signature verification of the kernel modules with

mokutils --disable-validation

x11-video-nvidiaG05, instead, works properly.

After the installation of this driver, the second screen was still blank, so in the end I installed suse-prime, then ran

prime-select nvidia

from console and finally, after a logout, the second screen started working properly.

3

Yesterday I was also facing the same issue.
I have nvidia 1050ti, dual boot with secure boot enabled with no option to disable secure boot (corporate laptop password locked).

After trying all kind of solution available, nothing worked. Finally I downgraded all the driver from *G06 to *G05, which worked. So I atleast now have a working system that ain’t terribly broken and I can work on it.

Wondering how this problem remains open since Feb, 2022.

Using an older driver with a old graphic, I think I’m not missing much (data analytics and not game being my use case) but I can see I’m stuck on CUDA v11.3 instead of CUDA v11.7.