rEFInd 0.7.3 allows me to use MOK Manager to add refind.cer key and I have UEFI Secure Boot working.
Adding fedora-ca.cer key allows UEFI Secure Boot of Fedora 18.
Also UEFI Secure Boot of Windows 8 x64 and Recovery 8 x64 are working from rEFInd Menu.
That is all very nice, but I have two issues with MOK Manager:
MOK Manager to Add keys does work when booting from USB-Stick,
but MOK Manager hangs when booting from portable USB-harddisk (cursor to select drives for key files does NOT move)
So I used USB-Stick to Add Keys.
After having used MOK Manager then it seems that UEFI BBS F8 Boot Menu is not working anymore as expected.
The EFI FAT32 partition is the first of my Samsung S2 Portable USB harddisk,
but the first entry in BBS Menu fails and the second entry will allow to boot from EFI partition with rEFInd Menu.
It seems to me that relation between partition and entry in BBS Menu is disturbed (shifted).
On other Portable USB-harddisk with four entries in BBS Menu then I need to use third entry for booting first partition.
Problem is you never know which entry correspond to booting the FAT32 EFI (first) partition
Could you try rEFInd 0.7.4 with respect to your first problem? I made some changes to the way it passes options to programs, and even though MokManager doesn't really use options, it's conceivable that those changes will make it work more reliably.
As to your second problem, this sounds like an EFI bug to me, or possibly a bug in Shim. You might want to report it to your motherboard or computer manufacturer (although I doubt if they'll be very helpful), or file a bug report against shim with Fedora. rEFInd itself doesn't actually touch the EFI variables store, so it can't be rEFInd that's the proximal cause of the problem. (There's a chance that something about the way rEFInd launches MokManager causes the latter to do something bad, though.)
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
I have tried rEFInd 0.7.4 for booting from portable USB-harddisk, but without success regarding the first MOK Manager issue.
It means cursor does NOT move in Shim UEFI key management menu, where to select drive with keys to be selected by MOK Manager.
It seems to me that the issue is in Shim or MOK Manager and not in rEFInd.
Thanks for info on second issue that is probably also due to Shim or MOK Manager or EFI implementation.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
rEFInd 0.7.3 allows me to use MOK Manager to add refind.cer key and I have UEFI Secure Boot working.
Adding fedora-ca.cer key allows UEFI Secure Boot of Fedora 18.
Also UEFI Secure Boot of Windows 8 x64 and Recovery 8 x64 are working from rEFInd Menu.
That is all very nice, but I have two issues with MOK Manager:
==============================================================
MOK Manager to Add keys does work when booting from USB-Stick,
but MOK Manager hangs when booting from portable USB-harddisk (cursor to select drives for key files does NOT move)
So I used USB-Stick to Add Keys.
http://www.911cd.net/forums//index.php?showtopic=25329&view=findpost&p=174138
==============================================================
After having used MOK Manager then it seems that UEFI BBS F8 Boot Menu is not working anymore as expected.
The EFI FAT32 partition is the first of my Samsung S2 Portable USB harddisk,
but the first entry in BBS Menu fails and the second entry will allow to boot from EFI partition with rEFInd Menu.
It seems to me that relation between partition and entry in BBS Menu is disturbed (shifted).
On other Portable USB-harddisk with four entries in BBS Menu then I need to use third entry for booting first partition.
Problem is you never know which entry correspond to booting the FAT32 EFI (first) partition
http://www.911cd.net/forums//index.php?showtopic=25329&view=findpost&p=174152
==============================================================
Last edit: wimb 2013-08-21
Could you try rEFInd 0.7.4 with respect to your first problem? I made some changes to the way it passes options to programs, and even though MokManager doesn't really use options, it's conceivable that those changes will make it work more reliably.
As to your second problem, this sounds like an EFI bug to me, or possibly a bug in Shim. You might want to report it to your motherboard or computer manufacturer (although I doubt if they'll be very helpful), or file a bug report against shim with Fedora. rEFInd itself doesn't actually touch the EFI variables store, so it can't be rEFInd that's the proximal cause of the problem. (There's a chance that something about the way rEFInd launches MokManager causes the latter to do something bad, though.)
I have tried rEFInd 0.7.4 for booting from portable USB-harddisk, but without success regarding the first MOK Manager issue.
It means cursor does NOT move in Shim UEFI key management menu, where to select drive with keys to be selected by MOK Manager.
It seems to me that the issue is in Shim or MOK Manager and not in rEFInd.
Thanks for info on second issue that is probably also due to Shim or MOK Manager or EFI implementation.