[CentOS-devel] testing SecureBoot

[Manuel Wolfshant]

On 06/23/2014 02:04 AM, Anssi Johansson wrote:
> ...]
>
> I now changed the Secure Boot Mode from Standard to Custom, and changed
> Default Key Provisioning from Enabled to Disabled. That gave me an
> option to Clear Secure Boot keys, which I did.
>
> A consequence of that was that the System Boot State changed from User
> to Setup, and Secure Boot Mode State changed to Disabled. Secure Boot
> was still left Enabled.
>
> THIS setting allowed me to boot from the USB sticks (C7 secureboot and
> RHEL7rc1). Perhaps this is actually the way it's supposed to work.
>
> I have now successfully installed C7 on that system with Secure Boot
> enabled, and the system boots afterwards with Secure Boot still enabled.
>
> Apologies for the noise, but perhaps this info is useful for someone who
> stumbles on this same problem.

If this is the intended behaviour, I suggest to write it down in the 
ReleaseNotes and/or C7 FAQ.