Secure Boot Surface Laptop

Followed instructions for secure boot limine

>sbctl status
Installed: ✓ sbctl is installed
Owner GUID: 9fc7cb7c-108b-4470-b0c4-951ce8d37765
Setup Mode: ✗ Enabled
Secure Boot: ✗ Disabled
Vendor Keys: microsoft

But once I exit to bios and switch secureboot from none to microsoft & third party ca the system won’t boot.

can you shown me the output of sudo sbctl verify ?

you can use ``` text ``` to have

preformated text 
like this

also welcome to the forum!

here it is and thank you!

Verifying file database and EFI images in /boot...
✓ /boot/EFI/BOOT/BOOTX64.efi is signed
‼ /boot/bc5769eee8f64f06b1ceffe23add5573/linux-cachyos-lts/vmlinuz-linux-cachyos-lts does not exist
‼ /boot/bc5769eee8f64f06b1ceffe23add5573/linux-cachyos/vmlinuz-linux-cachyos does not exist
✓ /boot/EFI/BOOT/BOOTX64.EFI is signed
✓ /boot/EFI/Linux/bc5769eee8f64f06b1ceffe23add5573_linux-cachyos-lts.efi is signed
✓ /boot/EFI/Linux/bc5769eee8f64f06b1ceffe23add5573_linux-cachyos.efi is signed
✓ /boot/EFI/Linux/bc5769eee8f64f06b1ceffe23add5573_linux-surface.efi is signed
✓ /boot/EFI/limine/limine_x64.efi is signed
✓ /boot/bc5769eee8f64f06b1ceffe23add5573/limine_history/vmlinuz-linux-cachyos-lts_sha256_fb332dab0164e583d761deef9b75d883e770607a6ca17c684ff8e035f0eb36d5 is signed
✓ /boot/bc5769eee8f64f06b1ceffe23add5573/limine_history/vmlinuz-linux-cachyos_sha256_3a1c0ebf0d27ccc6ed0296fa653cf4c6a5a17fbd7f99abac4a2ef265c9c3b2cf is signed
✓ /boot/bc5769eee8f64f06b1ceffe23add5573/limine_history/vmlinuz-linux-surface_sha256_b308230d50dca2fe4df05e709c0b76c5ec38115c754d59daff9f458fc75e5ab8 is signed
✓ /boot/vmlinuz-linux-cachyos is signed
✓ /boot/vmlinuz-linux-cachyos-lts is signed

hmmm, since i’ve seen this two, you might want to try removing it first and try again ?
with

sudo sbctl remove-file /boot/bc5769eee8f64f06b1ceffe23add5573/linux-cachyos-lts/vmlinuz-linux-cachyos-lts
sudo sbctl remove-file /boot/bc5769eee8f64f06b1ceffe23add5573/linux-cachyos/vmlinuz-linux-cachyos

and re-sign all just in case

sudo sbctl sign-all

in the worst case you can always do

  1. go to bios reset all your secure boot, (clear everything)
  2. and setup from scratch again (use wiki for it)