Perform MOK management on first boot after install

[XP-refugee]

I did a fresh install of LM 20.3 XFCE

On first boot it shows a page headed "Perform MOK management".
The installation guide doesn't mention this step.
https://linuxmint-installation-guide.re ... en/latest/

A quick search of forums and google doesn't show how to proceed.

If anyone knowledgeable in this area could provide cookbook style recipe instructions suitable to a low-skilled user I would be grateful.

Edit: Guide issue lodged at https://gitlab.com/linuxmint/documentat ... /issues/27

[pbear]

My recipe for solving the problem is simple: Disable secure boot. Not utterly worthless, but not worth the trouble.

As I've never performed MOK management, I can't tell you how. I refer you to three resources, though. First is the Ubuntu wiki on Secure Boot, which among other things explains how MOKs fit into the picture. Second is a Unix & Linux thread which includes a good concise explanation of how MOK works. Third is an askubuntu thread with screenshots of how to enroll the installation MOK.

[Pjotr]

To add: it's not hard to deal with MOK. I sometimes forget to disable Secure Boot before doing an installation of Mint, so I come across this aggravation from time to time (sigh....).

I then create this MOK key: 123456789. This makes it easy upon rebooting, when you're twice required to enter a particular character of your MOK key. For example, when you're asked for the 6th character of that key, it's simply.... 6. Can't make any mistakes with that.

Can't help wondering what bs job holder had the brilliant idea to introduce this sh*tty little annoyance.... I bet he was rewarded with a handsome bonus.

[SMG]

I did a fresh install of LM 20.3 XFCE

On first boot it shows a page headed "Perform MOK management".

That page comes from your hardware. The operating system (Linux Mint) does not control MOK. The computer's firmware (UEFI/BIOS) controls it. It is not part of the operating system which is why it is not part of the Linux Mint installation guide. Additionally, not every manufacturer handles it the same way.

I suggest you check the links pbear has provided and please also check with whoever made your computer to get information on how to address it.

[XP-refugee]

Thanks people.

Your work here will help the next hapless wanderer confronted by MOK.

I had to shut down the PC before addressing MOK.
When I rebooted it didn't appear.
Maybe I'm living in yet another fool's paradise but things seem OK for now.

If the Guide had a "Disable Secure boot" instruction then I missed it.
If the Guide is meant for naive low-skilled users then it needs to address screens like Perform MOK management.

[SMG]

If the Guide had a "Disable Secure boot" instruction then I missed it.

One does not need to disable Secure Boot to install Linux Mint so there is no need to have it in the instructions.

If the Guide is meant for naive low-skilled users then it needs to address screens like Perform MOK management.

Just how many steps not related to the operating system do you think the guide should cover? Tuning off Secure Boot is part of the BIOS/UEFI which is part of the hardware. Whoever made your hardware should be providing the instructions for Secure Boot and MOK. Contact them for instructions.

[XP-refugee]

Further examination appears to shows that Secure Boot was switched off.

I think I have a far better idea of what naive low-skilled users need than you do. Unfortunately, as they say, "It's my lived experience".

[Pjotr]

One does not need to disable Secure Boot to install Linux Mint so there is no need to have it in the instructions.

I highly recommend to disable it in all cases. It's at best useless, and usually a bloody annoyance.

[pbear]

Further examination appears to shows that Secure Boot was switched off.

You must have done that later. The installer would not have invoked the MOK procedure if secure boot had already been disabled. Perhaps the system disabled secure boot when you didn't respond to the MOK prompt, although that's the opposite of how it should work.

I think I have a far better idea of what naive low-skilled users need than you do.

FWIW, I agree with you. I've always thought the Installation Guide is too thin, and now rather old. Unfortunately, thin documentation is typical of Linux. It's a shoestring operation, where everyone working on it has too much to do and not enough time. Perhaps this makes Linux not a good fit for you - it's not a good fit for most people, imho - but it is what it is.

[SMG]

Further examination appears to shows that Secure Boot was switched off.

Enabling or disabling Secure Boot can on be done by the user in the BIOS/UEFI. It can not be changed through the operating system.

I think I have a far better idea of what naive low-skilled users need than you do. Unfortunately, as they say, "It's my lived experience".

I believe you have an idea of what you need.

I think it is unlikely you have an idea of what others who are new might need because it is unlikely you have experience helping others who are new given your professed "lived experience". I have several decades of tech education experience and much to most of it is with people without much tech background.

There is limited opportunity to "personalize" and keep updated instructions when the audience is world-wide and the skill level varies widely. What might help you would only confuse others when giving details which may not apply to their situation. I've seen that happen many times. That is one of the reasons we ask people to create their own topics on the forum--they get personalized feedback appropriate to their level of understanding.

[XP-refugee]

I first failed installing Linux around 94.
And kept failing every 3 years or so through to around 2017 when Linux setup and the cookbook instructions available meant I could proceed being almost completely ignorant.

Hopefully this thread will help those who stare at the Perform MOK maintenance screen and think, "Maybe I'll stay with XP a bit longer."