Secure boot disabled for Linux, but enabled for Windows?

[spak]

Hello,
I'm a fresh Linux user, just installed Mint 22 Cinnamon yesterday alongside Windows 11 (dual boot). I've installed the recommended Nvidia drivers but they don't work - apparently secure boot is blocking them.
I tried using this command:

mokutil --disable-validation

but it doesn't work.
I need the secure boot to be enabled, so here's my question:
Can I somehow disable secure boot for Linux, but keep it enabled for Windows?

[Kilrah]

Yeah, by going into the bios and turning it on/off each time you boot another OS...

[spak]

1 hour ago, Kilrah said:

Yeah, by going into the bios and turning it on/off each time you boot another OS...

Funny idea.
Do you have any suggestions for how to make the drivers work on Linux while keeping secure boot enabled?

[Kilrah]

Never tried, but see this

https://askubuntu.com/questions/1023036/how-to-install-nvidia-driver-with-secure-boot-enabled

[OhioYJ]

52 minutes ago, spak said:

Funny idea.
Do you have any suggestions for how to make the drivers work on Linux while keeping secure boot enabled?

Is there a reason you aren't using one of the signed drivers from synaptic or the driver manager? All of those will just work with secure boot enabled, no fiddling around.

 

I haven't looked recently, I think up to 550 was in there. My 4090 runs fine with it. 

[spak]

4 minutes ago, OhioYJ said:

Is there a reason you aren't using one of the signed drivers from synaptic or the driver manager? All of those will just work with secure boot enabled, no fiddling around.

 

I haven't looked recently, I think up to 550 was in there. My 4090 runs fine with it. 

I've installed recommended drivers from the driver manager.

[spak]

16 minutes ago, Kilrah said:

Never tried, but see this

https://askubuntu.com/questions/1023036/how-to-install-nvidia-driver-with-secure-boot-enabled

Thank you, I will try it and let you know.

[OhioYJ]

56 minutes ago, spak said:

I've installed recommended drivers from the driver manager.

I do know at some point I had issues with one of the drivers (that was working perfectly) after a kernel update, so I had to switch versions (so don't get hung up on "recommended" version too much). 

 

Have you tried manually enrolling the secure boot key? It should do that automatically. However, you will have to do that say after a BIOS update. From the terminal:

 

sudo update-secureboot-policy --enroll-key

 

Reboot, enroll the key. 

 

If that doesn't work, I would try a different driver entirely. It should just work. I'm using secure boot with Nvidia and Mint on multiple machines. 

[spak]

3 hours ago, OhioYJ said:

I do know at some point I had issues with one of the drivers (that was working perfectly) after a kernel update, so I had to switch versions (so don't get hung up on "recommended" version too much). 

 

Have you tried manually enrolling the secure boot key? It should do that automatically. However, you will have to do that say after a BIOS update. From the terminal:

 

sudo update-secureboot-policy --enroll-key

 

Reboot, enroll the key. 

 

If that doesn't work, I would try a different driver entirely. It should just work. I'm using secure boot with Nvidia and Mint on multiple machines. 

It worked perfectly fine. Drivers are working now, thank you very much.

[Matthew Miller]

For what it's worth, here's the instructions for Fedora Linux. Much of this will probably also apply to other distros.

 

https://docs.fedoraproject.org/en-US/quick-docs/mok-enrollment/