Dualboot with enabled secureboot

[mor]

Hey, everybody. I want to use Manjaro along with win11 with Secureboot enabled. When trying to use sbctl I am failing when I enter sbctl enroll-keys -m. The system says “Your system is not in Setup Mode! Please reboot your machine and reset secure boot keys before attempting to enroll the keys.” I have a msi motherboard (b350m pro vdh) and I am aware that they have problems entering Setup Mode. Turning off Secure Boot is not my way, as I often play on win11 in Valorant and FaceIt CS2 which require TPM 2.0 and SecureBoot. What should I do to make GRUB (or other boot loader) able to run manjaro and win11?

[omano]

Manjaro is not meant to be run with Secure Boot enabled. You’ll have to search the forum if others successfully did it and how.

[Aragorn]

Welcome at the forum!

Manjaro does not support Secure Boot, but this does of course not mean that it cannot be made to work. However, the onus is on the user to make it work.

Please see Unified Extensible Firmware Interface/Secure Boot - ArchWiki for further instructions.

[soundofthunder]

@mor

Turning off Secure Boot is not my way

And here we have a quandary;
Secure Boot is not the Manjaro way…

This doesn’t mean it can’t be done, but it does require you to perform the necessary research, and do it yourself.

Note that Grub (being GPL 3) isn’t supported by Secure Boot as provided by Microsoft (extra research for you).

But first consider this;

While it may be inconvenient, it’s possible to enable/disable Secure Boot from within Windows; you could therefore enable it before using Valorant/FaceIt, and disable it before rebooting into Manjaro.
Note that I haven’t tested that scenario.

---

You may find the following link useful should you wish to persist with this endeavour; however, if your system isn’t encrypted, rolling your own Secure Boot is probably not worth the effort. Additionally, no support would be offered.

Here’s the link:

[root tip] [Utility Script] Encrypted Manjaro Linux using Verified Boot

Difficulty: ★★★★★ Work In Progress [image] Verified Boot Please note the distinction Verified vs. Secure Please respect that this topic is NOT a discussion of pro’s and con’s of Secure Boot. Constructive feedback - errors, typos, improvements are welcome. Opinions on Microsoft, the boot method or TPM has been discussed ad nauseum. Been there done that - time to move on . Inspiration and credit Accidently stumbled on this [User:ZachHilman/Installation_-Btrfs%2B_LUKS2_%2B_Sec…

Good luck.

---

Hi @mor and welcome to the Manjaro community.

As a new forum user, please take some time to familiarise yourself with Forum requirements; in particular, the many ways to use the forum to your benefit.

To that end, some or all these links may be invaluable:

• [How to] Request Support
• [How to] Find Error Logs
• [How to] Find System Information
• [How to] Post Screenshots and Links
  Please avoid posting screenshots of text.
• [How to] Post Command Output and File Content as Formatted Text
• Tutorials (category) There’s much to be found here!
• Forum Rules
• Strict Forum Rules and Guidelines

Last, but not least, the Update Announcements, which you should check frequently for important update related information.

An issue may be directly related to a particular update; these announcements should generally be checked before posting a request for support.

I hope this is helpful.

Cheers.

[linux-aarhus]

@mor

The system says “Your system is not in Setup Mode! Please reboot your machine and reset secure boot keys before attempting to enroll the keys.

Setup Mode is temporary. After you enroll the keys using sbctl, the firmware is no longer in setup mode.