Cannot boot into SystemRescue with Secure boot enabled

General discussions
1

I have installed SystemRescueCD onto a USB Flash drive using Rufus. The options selected in Rufus for burning the ISO into USB Flash drive are given below

Partition Scheme: GPT
Target System: UEFI (non CSM)
Enable runtime UEFI media validation: Yes
File System: NTFS
Cluster size: 4096 bytes.

I have UEFI and secure boot enabled. I cannot disable secure boot from the BIOS.

When I boot into System Rescue the following error is shown

“Could not launch original bootloader [15] access denied”

How do I fix this issue so that I can boot into SystemRescueCD? Are there some options, in Rufus, that I should be changing while creating the bootable USB?

2

SystemRescue does not support secure boot as of today, and it’s not something that can be done easily unfortunately. The project is based on ArchLinux which does not support secure boot. So realistically, it cannot be implemented at this stage.

It is still possible to use a personal key to sign the files, and to authorise a personal key in the firmware, if this feature is absolutely essential for an individual. But this does not work out of the box, it requires substantial effort.

3

How can an individual use a personal key to sign the files? Do all the files have to be authorized or only the boot64.efi file?

I will look at the BIOS/Manufacturer documentation on how the personal key can be added to the firmware.

4

You can find some ideas in the following discussion: