Secure boot refind tutorial

General
1

I followed the tutorial to the tea. Everything went exactly As it should. Except at the end, this is the get and I can’t load in insecure boot.

Windows 11 is installed On a separate SSD

Cachyos installed on its own as ssd.

IMG_1519
IMG_15194032×3024 968 KB

So where do I go from here? I can only load into it if I turn secure boot off, but then I can’t load into Windows 11 without entering in 1 million digit key.

2

Personally depending on how long it would take you to install and resetup WinBLOWS 11 I would just wipe the drive , go into the BIOS and turn off and leave off Secure Boot. Then install 11 and then Cachy.

1 Like
3

Hi.
I’m having similar issue. I have my secure boot disabled. I installed 11 then cachyos. The refind boot manager shows only a white blank screen. I have the Windows 11 and cachyos on the same SSD. Any help?

1000134805
10001348051920×2550 279 KB

4

Stick to Grub.

5

Should I reinstall the cachyos and select grub or how can I change to grub. I’ve tried to chroot and install grub on the system but it’s still not detecting the Windows and cachyos.

PS, I’m not using secure boot

6

That would be a question for others. I would think if you go into the bios that you should be able to set your Windows install as default and boot to it. If after setting that and it still doesn’t boot to Windows I would reinstall both OS’s installing Windows first, but that would be me. Some here may have a fix for you where you don’t have to reinstall.

7

Thanks for the advice. My Windows boots fine, same as my cachyos. I have configured grub to manage both OS.
I’m still wondering why refind won’t detect the two OSes. I realised I have two esp before I configured grub

8

Try these/For anyone seeing this on google:

https://www.rodsbooks.com/refind/secureboot.html

Edit: i also forgot you have to create the certificate by running in your terminal openssl req -new -x509 -newkey rsa:2048 -keyout "key.pem" \ -outform DER -out "cert.der" -nodes -days 36500 \ -subj "/CN=<your name>/" and you have to enroll your certificate by running using mokutil --import [Certificate path prob in the home directory]

9

We have reworked our tutorial for secure boot. Should work now for every bootloader.