Search results

Check secure boot config measurements against current variable contents

preinstall-checksRelated to the EFI preinstall checks in secbootRelated to the EFI preinstall checks in secboot

Status: Open.

#538 In canonical/secboot;

· chrisccoulson opened on Apr 14, 2026

Test that no OS-present events appear in PCRs 0, 1, 2, and 3

preinstall-checksRelated to the EFI preinstall checks in secbootRelated to the EFI preinstall checks in secboot

Status: Open.

#537 In canonical/secboot;

· chrisccoulson opened on Apr 14, 2026

Recovery key is required after TPM/FDE installation

Status: Open.

#522 In canonical/secboot;

· nancyc12 opened on Mar 4, 2026

Don't present ErrorKindAddonDriversPresent for option ROMs loaded from integrated PCI devices.

Status: Open.

#516 In canonical/secboot;

· chrisccoulson opened on Mar 2, 2026

Suppress ErrorKindNoKernelIOMMU errors on systems with no external facing PCI ports

Status: Open.

#513 In canonical/secboot;

· chrisccoulson opened on Mar 2, 2026

Multiple similar options given to reset the tpm

Status: Open.

#503 In canonical/secboot;

· zyga opened on Feb 6, 2026

Platform Secure Boot is not enabled is wrong for AMD systems

Status: Open.

#501 In canonical/secboot;

· superm1 opened on Feb 4, 2026

preinstall: ErrKindTPMDeviceLockoutLocked out should be associated with ActionReboot in some circumstances

preinstall-checksRelated to the EFI preinstall checks in secbootRelated to the EFI preinstall checks in secboot

Status: Open.

#459 In canonical/secboot;

· chrisccoulson opened on Sep 17, 2025

preinstall: Add PPI action to reconfigure PCR banks

preinstall-checksRelated to the EFI preinstall checks in secbootRelated to the EFI preinstall checks in secboot

Status: Open.

#457 In canonical/secboot;

· chrisccoulson opened on Sep 10, 2025

Unable to encrypt due to PCR4 measurement error

Status: Open.

#456 In canonical/secboot;

· jamesps-ebi opened on Aug 28, 2025

Cannot check TPM discreteness using Intel BootGuard status: no TPM2 device is available

Status: Open.

#455 In canonical/secboot;

· neurer opened on Aug 8, 2025

efi/preinstall: Check that TPM's platform hierarchy is disabled or has an authorization value

preinstall-checksRelated to the EFI preinstall checks in secbootRelated to the EFI preinstall checks in secboot

Status: Open.

#452 In canonical/secboot;

· chrisccoulson opened on Jul 22, 2025