My Oracle Support Banner

Oracle Linux: Secure Boot Enabled System Fails to Boot After Recent grub2/shim-x64 update: .../vmlinuz-4.18.0-372.9.1.el8.x86_64 has invalid signature (Doc ID 2880316.1)

Last updated on JULY 15, 2022

Applies to:

Linux OS - Version Oracle Linux 7.0 and later
Linux x86-64

Symptoms

An Oracle Linux 7 or 8 (OL7/8) Secure Boot enabled system, running the Red Hat Compatible Kernel (RHCK) in this instance, is updated to apply latest available patches.
Upon rebooting the system into the same kernel as before the update, the system fails to boot.
The following error is displayed to the system console:

 

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document
Symptoms
Changes
Cause
Solution
 1. Solution
 2. Workarounds
 1. Disable Secure Boot mode
 2. Use MODRHCK instead of RHCK
 3. Use UEK instead of RHCK
References

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.