How to manually sign Kali for UEFI Announcing the arrival of Valued Associate #679: Cesar...

Why is it faster to reheat something than it is to cook it?

preposition before coffee

How many morphisms from 1 to 1+1 can there be?

How many time has Arya actually used Needle?

What are the discoveries that have been possible with the rejection of positivism?

Google .dev domain strangely redirects to https

Can the Flaming Sphere spell be rammed into multiple Tiny creatures that are in the same 5-foot square?

What initially awakened the Balrog?

Most bit efficient text communication method?

How to report t statistic from R

Lagrange four-squares theorem --- deterministic complexity

Is the IBM 5153 color display compatible with the Tandy 1000 16 color modes?

Conditions when a permutation matrix is symmetric

What's the difference between the capability remove_users and delete_users?

Project Euler #1 in C++

Sum letters are not two different

What does 丫 mean? 丫是什么意思?

How can I prevent/balance waiting and turtling as a response to cooldown mechanics

The test team as an enemy of development? And how can this be avoided?

A term for a woman complaining about things/begging in a cute/childish way

Is there hard evidence that the grant peer review system performs significantly better than random?

What makes a man succeed?

How can I set the aperture on my DSLR when it's attached to a telescope instead of a lens?

Maximum summed subsequences with non-adjacent items



How to manually sign Kali for UEFI



Announcing the arrival of Valued Associate #679: Cesar Manara
Planned maintenance scheduled April 23, 2019 at 23:30 UTC (7:30pm US/Eastern)Adding X.509 certificate to UEFI secure boot database?Revert back from legacy to UEFI bootKali Linux Live CD Blackscreen/Not BootingNo Windows after installing KaliWindows 10 Only Boots In UEFI ModeBootloaders not showing up in UEFIInstalling a Linux kernel in the UEFI BIOS of the Xiaomi Mi Air 13Kali Linux change Windows boot logoWhy is Secure Boot needed if there is already UEFI lock?How does deactivating TPM in the T480 UEFI settings affect bitlocker? Is the TPM cleared?





.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box;
}







0















I have a laptop running Win10Pro and has UEFI. I have a USB stick with Kali on it.



If I disable Secure Boot, I can boot from Kali with no problem, but then Win10/BitLocker complains. Naturally, I cannot boot with Secure Boot because Kali is not signed.



How can I manually sign my Kali so I can make it boot that way? I'm definitely not above signing it myself with a custom key then telling UEFI to trust that key... if that's possible.










share|improve this question























  • Even if you were to sign Kali, you wouldn't solve your problem, because it must be signed by a certificate that is already trusted.

    – Ramhound
    7 hours ago











  • @ramhound Unless UEFI can let me add a new trusted key

    – iAdjunct
    7 hours ago













  • No; While you can add another key unless it's trusted by Microsoft, you will end up breaking Windows. You shouldn't need Secure Boot for BitLocker unless you are using the TPM to secure the BitLocker key. Ubuntu has supported Secure Boot for years (since 2013), so I am going to guess Kali does not support it, for a very good reason

    – Ramhound
    6 hours ago


















0















I have a laptop running Win10Pro and has UEFI. I have a USB stick with Kali on it.



If I disable Secure Boot, I can boot from Kali with no problem, but then Win10/BitLocker complains. Naturally, I cannot boot with Secure Boot because Kali is not signed.



How can I manually sign my Kali so I can make it boot that way? I'm definitely not above signing it myself with a custom key then telling UEFI to trust that key... if that's possible.










share|improve this question























  • Even if you were to sign Kali, you wouldn't solve your problem, because it must be signed by a certificate that is already trusted.

    – Ramhound
    7 hours ago











  • @ramhound Unless UEFI can let me add a new trusted key

    – iAdjunct
    7 hours ago













  • No; While you can add another key unless it's trusted by Microsoft, you will end up breaking Windows. You shouldn't need Secure Boot for BitLocker unless you are using the TPM to secure the BitLocker key. Ubuntu has supported Secure Boot for years (since 2013), so I am going to guess Kali does not support it, for a very good reason

    – Ramhound
    6 hours ago














0












0








0








I have a laptop running Win10Pro and has UEFI. I have a USB stick with Kali on it.



If I disable Secure Boot, I can boot from Kali with no problem, but then Win10/BitLocker complains. Naturally, I cannot boot with Secure Boot because Kali is not signed.



How can I manually sign my Kali so I can make it boot that way? I'm definitely not above signing it myself with a custom key then telling UEFI to trust that key... if that's possible.










share|improve this question














I have a laptop running Win10Pro and has UEFI. I have a USB stick with Kali on it.



If I disable Secure Boot, I can boot from Kali with no problem, but then Win10/BitLocker complains. Naturally, I cannot boot with Secure Boot because Kali is not signed.



How can I manually sign my Kali so I can make it boot that way? I'm definitely not above signing it myself with a custom key then telling UEFI to trust that key... if that's possible.







uefi kali-linux code-signing






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked 7 hours ago









iAdjunctiAdjunct

1,385817




1,385817













  • Even if you were to sign Kali, you wouldn't solve your problem, because it must be signed by a certificate that is already trusted.

    – Ramhound
    7 hours ago











  • @ramhound Unless UEFI can let me add a new trusted key

    – iAdjunct
    7 hours ago













  • No; While you can add another key unless it's trusted by Microsoft, you will end up breaking Windows. You shouldn't need Secure Boot for BitLocker unless you are using the TPM to secure the BitLocker key. Ubuntu has supported Secure Boot for years (since 2013), so I am going to guess Kali does not support it, for a very good reason

    – Ramhound
    6 hours ago



















  • Even if you were to sign Kali, you wouldn't solve your problem, because it must be signed by a certificate that is already trusted.

    – Ramhound
    7 hours ago











  • @ramhound Unless UEFI can let me add a new trusted key

    – iAdjunct
    7 hours ago













  • No; While you can add another key unless it's trusted by Microsoft, you will end up breaking Windows. You shouldn't need Secure Boot for BitLocker unless you are using the TPM to secure the BitLocker key. Ubuntu has supported Secure Boot for years (since 2013), so I am going to guess Kali does not support it, for a very good reason

    – Ramhound
    6 hours ago

















Even if you were to sign Kali, you wouldn't solve your problem, because it must be signed by a certificate that is already trusted.

– Ramhound
7 hours ago





Even if you were to sign Kali, you wouldn't solve your problem, because it must be signed by a certificate that is already trusted.

– Ramhound
7 hours ago













@ramhound Unless UEFI can let me add a new trusted key

– iAdjunct
7 hours ago







@ramhound Unless UEFI can let me add a new trusted key

– iAdjunct
7 hours ago















No; While you can add another key unless it's trusted by Microsoft, you will end up breaking Windows. You shouldn't need Secure Boot for BitLocker unless you are using the TPM to secure the BitLocker key. Ubuntu has supported Secure Boot for years (since 2013), so I am going to guess Kali does not support it, for a very good reason

– Ramhound
6 hours ago





No; While you can add another key unless it's trusted by Microsoft, you will end up breaking Windows. You shouldn't need Secure Boot for BitLocker unless you are using the TPM to secure the BitLocker key. Ubuntu has supported Secure Boot for years (since 2013), so I am going to guess Kali does not support it, for a very good reason

– Ramhound
6 hours ago










0






active

oldest

votes












Your Answer








StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});














draft saved

draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1427535%2fhow-to-manually-sign-kali-for-uefi%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown

























0






active

oldest

votes








0






active

oldest

votes









active

oldest

votes






active

oldest

votes
















draft saved

draft discarded




















































Thanks for contributing an answer to Super User!


  • Please be sure to answer the question. Provide details and share your research!

But avoid



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1427535%2fhow-to-manually-sign-kali-for-uefi%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







Popular posts from this blog

Couldn't open a raw socket. Error: Permission denied (13) (nmap)Is it possible to run networking commands...

VNC viewer RFB protocol error: bad desktop size 0x0I Cannot Type the Key 'd' (lowercase) in VNC Viewer...

Why not use the yoke to control yaw, as well as pitch and roll? Announcing the arrival of...