Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Verifiying shim SBAT data failed, SBAT self-check failed #197

Closed
Bjk8kds opened this issue Aug 14, 2024 · 9 comments
Closed

Verifiying shim SBAT data failed, SBAT self-check failed #197

Bjk8kds opened this issue Aug 14, 2024 · 9 comments

Comments

@Bjk8kds
Copy link

Bjk8kds commented Aug 14, 2024

I have successfully installed HackBGRT before using the steps in shim.md, however after the Windows 11 update in August 2024 (KB5041585) windows fails to boot at all and only displays a warning like this:

Verifiying shim SBAT data failed: Security Policy Violation
Something has gone seriously wrong: SBAT self-check failed: Security Policy Violation

This can be resolved by disabling Secure Boot and/or uninstalling HackBGRT.
Is there a way to install HackBGRT with Secure Boot enabled?
IMG_20240814_175147

@MKKelvinHK
Copy link

I also having this issues after got update of Windows 11.

@Metabolix
Copy link
Owner

Maybe they now require shim 15.8. I'll update the files in shim-signed from Debian repo when I have the time. Nice if someone could test it. You need to get the new shimx64.efi and mmx64.efi, then reinstall.

@Metabolix
Copy link
Owner

Metabolix commented Aug 16, 2024

Indeed, KB5041585 info page says: "This update applies SBAT to systems that run Windows. This stops vulnerable Linux EFI (Shim bootloaders) from running."

Can you try this version: HackBGRT-2.5.0-3-gc9c5c9b.zip (actually you only need to copy shim-signed from this). It has a newer version (15.8) of the shim boot loader.

@Skulldorom
Copy link

Indeed, KB5041585 info page says: "This update applies SBAT to systems that run Windows. This stops vulnerable Linux EFI (Shim bootloaders) from running."

Can you try this version: HackBGRT-2.5.0-3-gc9c5c9b.zip (actually you only need to copy shim-signed from this). It has a newer version (15.8) of the shim boot loader.

Just tried the above and it works with secure boot enabled!

@Metabolix
Copy link
Owner

Thanks @Skulldorom. Just checking: Did you have the reported problem before? If not, I'd appreciate input from someone who is affected.

@Skulldorom
Copy link

Thanks @Skulldorom. Just checking: Did you have the reported problem before? If not, I'd appreciate input from someone who is affected.

Yeah had the same issue after updating windows 11 image

@Metabolix
Copy link
Owner

Thanks, I'll now make this a release.

@MinhTruong311
Copy link

yes, I had the same problem but when I disabled the security boot, everything became normal

@Metabolix
Copy link
Owner

yes, I had the same problem but when I disabled the security boot, everything became normal

As stated above, this should be fixed in the latest version as of today. So have you tried version 2.5.1 yet? No need to disable secure boot.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

5 participants