Why and IDE / repository would need to Enroll Key in UEFI?

English Applications
1

I needed to install pyCharm for an online course I’m attending to, so I searched for it and found pycharm-community in openSUSE Software. Chose the community repository with the least outdated version (https://download.opensuse.org/repositories/home:/MaxxedSUSE/openSUSE_Tumbleweed/) and installed it.

Next day, when I booted PC found a message to Enroll Key in UEFI. When I chose View Key I found it’s a key from that repository. I find it suspicious so I didn’t enroll key.

IMG_20250509_110736
IMG_20250509_1107361920×2550 554 KB

IMG_20250509_110752
IMG_20250509_1107521920×2550 508 KB

IMG_20250509_110811
IMG_20250509_1108111920×1446 166 KB

As I don’t quite understand how UEFI works, is it normal to have to Enroll a Key from a repository in UEFI?

2

It isn’t normal to use a home repo. Use it at your own risk.

It is normal that if you install a kernel module from a non-standard repo, you will need to enroll a UEFI key for that module if you have enabled secure-boot.

1 Like
3

Thanks, @nrickert!

I’ll uninstall pyCharm because I have an alternative (Jupyter Lab) and remove the repository.

1 Like