I might be wrong but I think you don't need to disable secure boot and then enable it. Its pretty similar to using a ventoy multi-boot USB key; you got to do similar steps on first boot to get the keys saved and then you can boot from the ventoy key. I have a Thinkpad T480 but the bios is locked with a password and secure boot is on. I have windows 10 installed and Ubuntu(supports secure boot) on seperate drives. I'll see if I can get Refind working cause its kind of annoying having to mash f10 to change boot device....
I tried with secure boot on and I think the problem I had was to do the keys at the start of the process and there was an error or something in yellow. The setup just didn't work for me when I had secure boot on, might be different for your laptop. Keep me updated!
Im using arch and instead of showing the arch logo it shows up as tux, I have to manually configure the icon when i change my theme. Do you know how to fix that?
@@YoussGm Thanks for the fast reply. I was actually able to get into the MOK utility and enroll hashes. However, my install of Garuda Linux still won’t boot with secure boot enabled.
I'm not an expert at this but I found this forum: forum.garudalinux.org/t/garuda-install-with-secure-boot/24921/12 When you scroll down you can find a comment that says: "The rEFInd boot manager 22 has simplified shim setup tremendously, requiring running only a simple command (refind-install --shim /usr/share/shim-signed/shim.efi for hash only and refind-install --shim /usr/share/shim-signed/shim.efi --localkeys for hash and keys), but obviously you’ll have to switch to rEFInd to take advantage of that." So if you boot into linux without secure boot and then run the command given, it should work. Idk tho.
Yo. Idk how I got recommended this but, will the step be the same for Lenovo laptop and doing a dual boot on separate drives? Cuz Lenovo laptop has its own BIOS
Yes the steps will be almost the same for separate drives. But you will not need to shrink the partition if you don't have anything on the second drive. You can also skip the step where I make the efi partition for the second OS because it will be made automatically.
@@YoussGm well that was a quick reply 😂 I already installed OSes on both drivers though. Will just install 'refind' and 'preloader' be sufficient to get secure boot?
@@Aziqfajar it depends what lenovo and cpu you have. You need an HX cpu for overclocking, but if you have a lenovo legion, I believe there is undervolting options in the bios. You can also try to use intel XTU or throttlestop and try to undervolt and set core ratios there.
I might be wrong but I think you don't need to disable secure boot and then enable it. Its pretty similar to using a ventoy multi-boot USB key; you got to do similar steps on first boot to get the keys saved and then you can boot from the ventoy key. I have a Thinkpad T480 but the bios is locked with a password and secure boot is on. I have windows 10 installed and Ubuntu(supports secure boot) on seperate drives. I'll see if I can get Refind working cause its kind of annoying having to mash f10 to change boot device....
I tried with secure boot on and I think the problem I had was to do the keys at the start of the process and there was an error or something in yellow.
The setup just didn't work for me when I had secure boot on, might be different for your laptop. Keep me updated!
Im using arch and instead of showing the arch logo it shows up as tux, I have to manually configure the icon when i change my theme. Do you know how to fix that?
Idk how to fix that but there are tutorials on youtube that show how to set a custom theme on refind, that should be helpful.
Followed your guide, got to reFind and my system hangs when I try to launch the MOK utility. So close to getting this working. :(
Try to disable secure boot in bios and then try again, you can enable it after the whole process is done.
Hope this helps!
@@YoussGm Thanks for the fast reply. I was actually able to get into the MOK utility and enroll hashes. However, my install of Garuda Linux still won’t boot with secure boot enabled.
I'm not an expert at this but I found this forum: forum.garudalinux.org/t/garuda-install-with-secure-boot/24921/12
When you scroll down you can find a comment that says: "The rEFInd boot manager 22 has simplified shim setup tremendously, requiring running only a simple command (refind-install --shim /usr/share/shim-signed/shim.efi for hash only and refind-install --shim /usr/share/shim-signed/shim.efi --localkeys for hash and keys), but obviously you’ll have to switch to rEFInd to take advantage of that."
So if you boot into linux without secure boot and then run the command given, it should work. Idk tho.
Yo. Idk how I got recommended this but, will the step be the same for Lenovo laptop and doing a dual boot on separate drives? Cuz Lenovo laptop has its own BIOS
Yes the steps will be almost the same for separate drives.
But you will not need to shrink the partition if you don't have anything on the second drive.
You can also skip the step where I make the efi partition for the second OS because it will be made automatically.
@@YoussGm well that was a quick reply 😂 I already installed OSes on both drivers though. Will just install 'refind' and 'preloader' be sufficient to get secure boot?
Yes that should work, you just need to do the process on one OS, not both.
Also if you have any linux kernel, you need to enroll it in the hashtool.
@@YoussGm wait hold on. Do you think that Lenovo laptops BIOS also can have tuning capability like on CPU if there's a file for it?
@@Aziqfajar it depends what lenovo and cpu you have. You need an HX cpu for overclocking, but if you have a lenovo legion, I believe there is undervolting options in the bios.
You can also try to use intel XTU or throttlestop and try to undervolt and set core ratios there.
So fast it made me dizzy..
Thanks for the input, I'll make sure to take my time in future videos!
You can play the video in 0.75x speed to make it less fast.