Another rookie question - does zorin handle secure boot turned on now?

General Help
6

Nvidia specifically will work with secure boot if you:

  • Install Zorin with secure boot enabled in the installer while allowing proprietary drivers.
  • After the OS install, more likely than not (with 4 of 4 different Nvidia laptop cards I've used), you'll need to enable X11 instead of Wayland.
    Edit the configuration file:
    • sudo nano /etc/gdm3/custom.conf
    • to uncomment [remove # from] the line containing:
      • WaylandEnable=false
  • Either way, you must enroll the machine operator key (MOK) that Zorin signs the Nvidia drivers with:
    • sudo mokutil --import /var/lib/shim-signed/mok/MOK.der
    • Reboot afterwards and enroll the key in the special bios menu that appears.
    • You only have to do this once, even if you change driver versions.
2 Likes