perez987 / opencore-and-uefi-secure-boot Goto Github PK

I've followed your instructions carefully, and then replace all the EFI folder to my OpenCore EFI partition. I've also already append the DB and KEK and replacing the PK from my BIOS. It booted up to OpenCore.efi, but no Mac partition is present.

Strangely, when I do a local booting via Ventoy to my OpenCore's BOOTx64.efi (with secure boot activated), the Mac partition appears. But I don't know what causing this problem.

As an additional information, Ventoy uses shim in order to enroll their MOK cert, but I don't know if this has any correlation with the implementation of OpenCore UEFI secure boot.

OpenCore-UEFI-Template

automates process of installing OpenCore on your system

I followed the guide step-by-step and got to this step, but as soon as I tried to hit Update, the BIOS just froze. I restarted my PC and now whenever I enter the Key Management Page under secure boot, it freezes. I can't enable or disable secure boot either since that option is located in the Key Management Page.

At this point, I'm just trying to get back to a working state. I can still boot into Windows 11 thankfully, but I can't get around this BIOS issue. I've tried flashing to the latest BIOS and even removing the battery for an hour and shorting the jumper. Do I have any other options here?

I followed the guide pretty early on and had no issues however yesterday I had to run a BIOS update on my mainboard and upon reinserting all the keys I still got hit with a Secure Boot Violation because of Invalid Signatures when booting OpenCore afterwards. Looking around I found out that the Microsoft Certificate was apparently revoked:

ValdikSS/Super-UEFIinSecureBoot-Disk#15

Was this already reflected in the guide, is there an updated certificate?

Since the HfsPlus.efi file is located at /Downloaded/HfsPlus.efi, and that path doesn't match the pattern of the script: ./Downloaded/X64/EFI/**/*, the HfsPlus.efi is not being signed.

A solution would be either:
1- Set the download target HfsPlus.efi to /Downloaded/X64/EFI/OC/Drivers/HfsPlus.efi (when using -O flag in wget command)
2- Modify the pattern to: ./Downloaded/*

I followed successfully your guide and was able to boot up to OpenCanopy picker list.
But MacOS installation isn't showed in the list, I can see an access denied error for APFS in the logs.

So I would ask if it is necessary to activate Apple Secure Boot or anything else in the config.plist?

Thanks for the guide anyway!