Secure Boot Update failed

General Help
21

Here is why I am failing the patch. Hope this helps

Zorin:~/Desktop$ fwupdmgr get-devices
Precision 5820 Tower
│
├─Bolt Receiver:
│ │ Device ID: 82091cc2e67e8e248d8dad9ac847708118484457
│ │ Summary: Miniaturised USB wireless receiver
│ │ Current version: MPR05.03_B0020
│ │ Bootloader Version: BOT30.01_B0010
│ │ Vendor: Logitech (HIDRAW:0x046D, USB:0x046D)
│ │ Install Duration: 30 seconds
│ │ GUIDs: 02d049be-c3f5-51c4-a312-b2284b43415a
│ │ af1404c4-f038-5b3e-92b0-09bf4aa84f1c
│ │ f70d9241-2656-546b-a8e4-211bac348667
│ │ Device Flags: • Updatable
│ │
│ ├─MX Master 3 B:
│ │ │ Device ID: 4b14aea0e2f16ec75f08d4d9c48d93eb72fc0ca2
│ │ │ Summary: Unifying Mouse
│ │ │ Current version: RBM14.00_B0009
│ │ │ Bootloader Version:BL141.00_B0009
│ │ │ Vendor: Logitech (USB:0x046D)
│ │ │ Install Duration: 4 minutes
│ │ │ GUID: 959e9b9b-2071-5d13-8e7e-c8a76795a68c
│ │ │ Device Flags: • Updatable
│ │ │ • Signed Payload
│ │ │
│ │ └─Radio:
│ │ Device ID: 21b64b738a106a0ec972be30208e0b3eebc82ad0
│ │ Current version:0x0119
│ │ Vendor: Logitech (USB:0x046D)
│ │ Install Duration:4 minutes
│ │ GUID: 8a8b36a9-9fc1-5d70-ab7f-c6563e4955cd
│ │ Device Flags: • Updatable
│ │
│ ├─Radio:
│ │ Device ID: bdcf6949e81f26972beaece7fb84ffd1f2e360e4
│ │ Current version: 0x013e
│ │ Vendor: Logitech (HIDRAW:0x046D, USB:0x046D)
│ │ Install Duration: 4 minutes
│ │ GUID: 4721886b-1602-51e2-abf0-d776a785f527
│ │ Device Flags: • Updatable
│ │
│ └─Wave Keys:
│ │ Device ID: 9180e0268b5fcc9f56ec709c95b83a4359c4182a
│ │ Summary: Unifying Keyboard
│ │ Current version: RBK88.01_B0006
│ │ Bootloader Version:BL204.01_B0006
│ │ Vendor: Logitech (USB:0x046D)
│ │ Install Duration: 4 minutes
│ │ GUID: 08a32f35-7355-5b2f-8e39-007e7774c086
│ │ Device Flags: • Updatable
│ │ • Signed Payload
│ │
│ └─Radio:
│ Device ID: c0acaf7840d3d1b5df897029b0dd3e09adb27dba
│ Current version:0x0126
│ Vendor: Logitech (USB:0x046D)
│ Install Duration:4 minutes
│ GUID: d8dfb252-d40c-5ad0-aa73-75ea62f23a57
│ Device Flags: • Updatable
│
├─CT2000BX500SSD1:
│ Device ID: 5dbeb140337f610d54913c0f43d15fdaa0eafb51
│ Summary: ATA drive
│ Current version: M6CR061
│ Vendor: Micron (ATA:0x1344, OUI:00a075)
│ GUIDs: f0dc68da-88c3-5658-ba62-5e52aedb6384
│ 9ac05876-61e8-591d-896f-b0781e2f520b
│ 0b8b92e0-66b4-5080-adfa-d0dbd1561d34
│ Device Flags: • Internal device
│ • Updatable
│ • System requires external power source
│ • Needs a reboot after installation
│ • Device is usable for the duration of the update
│
├─System Firmware:
│ │ Device ID: a45df35ac0e948ee180fe216a5f703f32dda163f
│ │ Summary: UEFI ESRT device
│ │ Current version: 2.43.0
│ │ Minimum Version: 2.43.0
│ │ Vendor: Dell (DMI:Dell Inc.)
│ │ Update State: Failed
│ │ Update Error: failed to update to 0: invalid firmware format
│ │ GUIDs: 9f1ecab8-a9d1-4d01-9bf8-b91cb116b641
│ │ 230c8b18-8d9b-53ec-838b-6cfc0383493a
│ │ Device Flags: • Internal device
│ │ • Updatable
│ │ • System requires external power source
│ │ • Supported on remote server
│ │ • Needs a reboot after installation
│ │ • Cryptographic hash verification is available
│ │ • Device is usable for the duration of the update
│ │
│ └─UEFI dbx:
│ Device ID: 362301da643102b9f38477387e2193e57abaa590
│ Summary: UEFI revocation database
│ Current version: 468
│ Minimum Version: 468
│ Vendor: UEFI:Linux Foundation
│ Install Duration: 1 second
│ GUIDs: 00fe3755-a4d8-5ef7-ba5f-47979fbb3423
│ 4a6cd2cb-8741-5257-9d1f-89a275dacca7
│ c6682ade-b5ec-57c4-b687-676351208742
│ f8ba2887-9411-5c36-9cee-88995bb39731
│ Device Flags: • Internal device
│ • Updatable
│ • Supported on remote server
│ • Needs a reboot after installation
│ • Only version upgrades are allowed
│ • Signed Payload
│
├─TEAM TM8FP6002T:
│ Device ID: 6cb3f1029b726117022528e3adb08b5b7b7b0f15
│ Summary: NVM Express solid state drive
│ Current version: VC2S0390
│ Vendor: Realtek Semiconductor Co., Ltd. (NVME:0x10EC)
│ GUIDs: 66be4e0e-1b4e-5f1a-935c-95c1e239df2b
│ 8947c893-7614-5f3f-b50a-553fba98d12b
│ a7e60b6a-6905-5ced-b778-c5115f8324d1
│ 40727c35-fbef-5225-8f1a-91f710d99c2e
│ 3a9a51ee-35e5-5cfc-bb63-3b6fabb9e147
│ Device Flags: • Updatable
│ • System requires external power source
│ • Needs a reboot after installation
│
└─TPM 2.0:
Device ID: a3487e128cf1413519bce8e9a1ab3f5981e61458
Summary: UEFI ESRT device
Current version: 1.3.2.8
Vendor: Dell Inc. (PCI:0x1028)
Update State: Success
Update Error: Updating disabled due to TPM ownership
GUIDs: d98cf9b6-9b84-56a9-9e2f-04c3bcbf78ed
ff71992e-52f7-5eea-94ef-883e56e034c6
dd853888-f2c5-5a5d-b0c0-a068bdd2e6c8
dc37fd1f-2db4-5bae-ab0a-20e268a2e918
Device Flags: • Internal device
• System requires external power source

Devices that were not updated correctly:

• UEFI dbx (468 → 20241101)

22

You wrote secure boot is on. Can you disable it and then try the update again with the linked commands. First add the ppa as described.

23

I have tried both ways

24

Also, I am seeing this on my Dell Latitude laptop as well. I am seeing it on my precision and my latitude laptops as well.

25

@jbehling Have you executed these commands one after the other? So far we have only received positive feedback that this procedure has fixed the dbx error.

1000006283
10000062831080×1523 121 KB

If you have dualboot with Windows you could also try to make the firmware update in Windows or look if your manufacturer offers a BIOS update.

26

same the problem I did everything the command up and now I apply the command you give me that the ouput of it fwupdmgr get-devices
ROG STRIX G16CHR_G16CHR
│
├─MZVL22T0HDLB-00BT7:
│ Device ID: 03281da317dccd2b18de2bd1cc70a782df40ed7e
│ Summary: NVM Express solid state drive
│ Current version: GXD71W2Q
│ Vendor: Samsung (NVME:0x144D)
│ GUIDs: 4d7a2791-106b-5e72-9cfb-8ea3d89f5421
│ 310f81b5-6fce-501e-acfb-487d10501e78
│ 60c89aac-f321-515b-b419-3cf02aa9d375
│ bec63ed7-a95f-54fe-b8cc-8e9fee64ba5a
│ 60fc7801-9f4e-5a6e-a3de-df9ea73c619d
│ Device Flags: • Internal device
│ • Updatable
│ • System requires external power source
│ • Needs a reboot after installation
│ • Device is usable for the duration of the update
│ • Signed Payload
│
├─System Firmware:
│ │ Device ID: a45df35ac0e948ee180fe216a5f703f32dda163f
│ │ Summary: UEFI ESRT device
│ │ Current version: 807
│ │ Minimum Version: 807
│ │ Vendor: ASUSTeK COMPUTER INC. (DMI:ASUSTeK COMPUTER INC. (Licensed by AMI, LLC.))
│ │ Update State: Success
│ │ GUIDs: 499c5557-9973-5c1d-b0e8-bbb5ce8f2b15
│ │ 230c8b18-8d9b-53ec-838b-6cfc0383493a
│ │ Device Flags: • Internal device
│ │ • Updatable
│ │ • System requires external power source
│ │ • Needs a reboot after installation
│ │ • Cryptographic hash verification is available
│ │ • Device is usable for the duration of the update
│ │
│ └─UEFI dbx:
│ Device ID: 362301da643102b9f38477387e2193e57abaa590
│ Summary: UEFI revocation database
│ Current version: 466
│ Minimum Version: 466
│ Vendor: UEFI:Linux Foundation
│ Install Duration: 1 second
│ GUIDs: 6c9777b8-19f2-5e2c-9210-66ef3691a9f3
│ c8749f7f-439b-5c3c-a2ea-3baacf663a5a
│ c6682ade-b5ec-57c4-b687-676351208742
│ f8ba2887-9411-5c36-9cee-88995bb39731
│ 3425d762-b684-51ab-8088-3f4175888c7a
│ d07ff664-b0e1-5f4e-a723-d7fbcbfcb94f
│ Device Flags: • Internal device
│ • Updatable
│ • Supported on remote server
│ • Needs a reboot after installation
│ • Only version upgrades are allowed
│ • Signed Payload
│
├─UEFI Device Firmware:
│ Device ID: 2292ae5236790b47884e37cf162dcf23bfcd1c60
│ Summary: UEFI ESRT device
│ Current version: 1
│ Vendor: DMI:ASUSTeK COMPUTER INC. (Licensed by AMI, LLC.)
│ Update State: Success
│ GUID: 2fe2cbfc-b9aa-4a93-ab5b-40173b581c42
│ Device Flags: • Internal device
│ • Updatable
│ • System requires external power source
│ • Needs a reboot after installation
│ • Device is usable for the duration of the update
│
├─UEFI Device Firmware:
│ Device ID: f95c9218acd12697af946874bfe4239587209232
│ Summary: UEFI ESRT device
│ Current version: 1
│ Vendor: DMI:ASUSTeK COMPUTER INC. (Licensed by AMI, LLC.)
│ Update State: Success
│ GUID: 86a885ee-d71e-2ed6-0fc1-9d6ccc9677eb
│ Device Flags: • Internal device
│ • Updatable
│ • System requires external power source
│ • Needs a reboot after installation
│ • Device is usable for the duration of the update
│
└─UEFI Device Firmware:
Device ID: d96de5c124b60ed6241ebcb6bb2c839cb5580786
Summary: UEFI ESRT device
Current version: 18876841
Vendor: DMI:ASUSTeK COMPUTER INC. (Licensed by AMI, LLC.)
Update State: Success
GUID: 7aa69739-8f78-41cb-bf44-854e2cb516bd
Device Flags: • Internal device
• Updatable
• System requires external power source
• Needs a reboot after installation
• Device is usable for the duration of the update