🍰
PXE Boot
  • Overview
  • Install Raspberry Pi OS
    • Raspberry Pi 4 not booting
    • List of OSes for Raspberry Pi
  • Install PXE server on Raspberry Pi 4
    • NFS kernel options
    • Kernel w/ initramfs
    • Mount NFS manually
    • Buildroot cheat sheet
  • Install UEFI PXE server
    • Where to get grubx64.efi?
    • GRUB config
    • Test UEFI PXE in Virtual Box
  • Configuration variants
  • DHCP + TFTP on dnsmasq
  • When dnsmasq fails
  • The case without proxy DHCP
  • More about ISC DHCP Server
  • PXE Boot when UEFI Network not working
  • List of PXE error codes
  • Troubleshooting
    • Security Boot Fail
    • TFTP server
    • PXE-T01: File not found
    • PXE-E16: No offer received
    • PXE-E21: Remote boot cancelled
      • Update option ROM on the NIC
    • PXE-E23: Client received TFTP error from server
    • Invalid DOS header magic
    • Unable to fetch TFTP image: Invalid Parameter
    • EFI boot manager
  • Secure Boot and custom certificates
    • bzImage has invalid signature
  • Kaspersy Rescue Disk 18
  • Reference
  • About the author
Powered by GitBook
On this page

Was this helpful?

  1. Secure Boot and custom certificates

bzImage has invalid signature

error: you need to load the kernel first

PreviousSecure Boot and custom certificatesNextKaspersy Rescue Disk 18

Last updated 3 years ago

Was this helpful?

Even with a successful chain shim -> grub displaying GRUB menu you can see the invalid signature error when you are trying to load a custom kernel.

The reason

Since the most recent GRUB2 update (2.02+dfsg1 in Ubuntu), GRUB2 does not load unsigned kernels anymore