My Oracle Support Banner

Oracle Linux: Secure Boot Enabled System Fails to Boot After Recent grub2/shim-x64 update: .../vmlinuz-4.18.0-372.9.1.el8.x86_64 has invalid signature (Doc ID 2880316.1)

Last updated on JULY 15, 2022

Applies to:

Linux OS - Version Oracle Linux 7.0 and later
Linux x86-64


An Oracle Linux 7 or 8 (OL7/8) Secure Boot enabled system, running the Red Hat Compatible Kernel (RHCK) in this instance, is updated to apply latest available patches.
Upon rebooting the system into the same kernel as before the update, the system fails to boot.
The following error is displayed to the system console:



To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document
 1. Solution
 2. Workarounds
 1. Disable Secure Boot mode
 2. Use MODRHCK instead of RHCK
 3. Use UEK instead of RHCK

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.