Ubuntu keeps rebooting and displays message that safeboot dbx has been updated

Help & Support
,
1

Ubuntu keeps rebooting and displays message that safeboot dbx has been updated. Should I try and remove safeboot dbx. I changed the command in bios to false instead of true and it didn’t help. Amy thoughts please?

2 Likes
Weekly Forum Summary
2

The only thought so far is to turn off UEFI secure boot.

Hopefully, Should uefi dbx be installed - Support and Help - Ubuntu Community Hub might help.

3 Likes
3

Not sure what version of Ubuntu you are running. But you can have a look at this also:

Also, not sure if similar to this reddit post and also here.

What @ugnvs linked to seems to be related as well. I hope these help. Keep us posted.

2 Likes
4

My situation is different in that the system has been running perfectly (like a dream, actualy). While it is running and I am using it, all of a sudden, it shuts down and immediately starts to reboot. Sometimes it displays the motherboard introduction screen and I have to hit F2 and enter the BIOS utility, exit that and restart or sometime it immediately displays the Ubuntu login screen. On each occasion the message appears at the top of the screen that an important update to the OS has been installed. When I check further, I learn that it is an update to safeboot dbx that has been installed. I should add that I have entered the BIOS and there is no option to uncheck safeboot. I should also add that before consulting you esteemed gentlemen (or should that be gentle-people?) I have thrown this question at AI and I think I have it stumped!

1 Like
5

I thought I saw something recently on the Ubuntu site talking about an issue with firmware updates. This could be related.


First off, find out if that is a legitimate update.

“safeboot dbx” itself is supposed to be a blacklist put in place to protect the BIOS.


To locate the package that installed the file, you can use

sudo dpkg -S safeboot

If legitimate, and you’ve identified the relevant package, you can, reinstall the update.


If that fails to fix the system, you may need to resort to

  • Restore Factory Keys, (be sure you have the factory keys before proceeding)

or

  • Reset Keys to default (again, be sure you have the default keys before proceeding)
2 Likes
6

Do you remember the news about Microsoft certificates expiration? They said that a system with expired keys would continue to boot for majority of systems. I.e. some systems might suffer. Does your situation resemble Microsoft Secure Boot Key Expiration Affects Linux Ecosystem?

3 Likes
7

I ran that command and got this response:
dpkg-query: no path found matching pattern safeboot

1 Like
8

If you have Synaptic, maybe do a search on both Name and Description for “safeboot”.

1 Like
9

I don’t know much here, but have you looked at the page

At the bottom right, there is a link pointing to

There is also this reference:

You might find something there that could help.

1 Like
Tools, cheat sheets and other useful resources
10

There is some interesting read there, thank you. I found a command somewhere that allowed me to determine if Safeboot was on or off and discovered that Safeboot is enabled even if the Bios doesn’t seem to know. As a side note, I have noticed that the reboots and quite as frequent as before.

1 Like
11

Hmm, Synaptic didn’t find Safeboot!

1 Like
12

Buongiorno
Stesso problema con Ubuntu
Ho risolto entrando nel BIOS e resettare chiavi ecc poi riavvia il PC dovrebbe risolversi

13

Hello,
Thanks for that advice, which keys, please?

1 Like
14

Presumably, a failsafe recovery set of keys are kept on-board the MotherBoard in a ROM.


I asked Google … and this is what I got. Someone who has experience would need to confirm whether the following is a safe sequence to follow.

Google response

This was my query string:

linux how to recover safeboot keys

(Google Response)

Method 1: Restoring Standard UEFI Secure Boot Keys

If you accidentally deleted your Secure Boot keys and are locked out of the system, you can usually restore the manufacturer’s factory keys.

  • Restart your computer and press the key to enter your firmware settings (usually F2, F10, F12, or Delete, depending on your motherboard).
  • Navigate to the Boot or Security tab and look for Secure Boot.
  • Enter the Key Management (sometimes labeled as Expert Key Management) menu.
  • Look for an option to Reset to Setup Mode and then select Restore Factory Keys (or Install Default Keys).
  • Save changes and exit (usually F10)
1 Like
15

The issue hasn’t reared its ugly head for around 14 hours. Should I dare to dream?

3 Likes
16

Did you do anything, since your previous post, to get there?

1 Like
17

I will check back and see if it was a command that fixed the problem. The situation changed in that I didn’t get the reboot and consequent failure but it simpley rebooted successfully and allowed me to login. I did however, encounter
a message telling me that the UEFI BIOS thing recorded a power surge during a boot and paused the process. So perhaps I have yet another faulty PSU.

This morning I received a message indicating that an OS update was available for safeboot dbx. Thisdifference this time,was that I was able to allow the update to proceed and it completed successfully. Time will tell, I suppose!

3 Likes