Secure boot update

I checked if my Zorin package secure boot was updated but it seems not, I got feedback but do not really understand it. I am brand new to Linux. I use Zorin core on a Lennovo laptop. This is the message I got :
The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 0686B78420038257
All packages are up to date.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://brave-browser-apt-release.s3.brave.com stable InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 0686B78420038257
W: Failed to fetch https://brave-browser-apt-release.s3.brave.com/dists/stable/InRelease The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 0686B78420038257
W: Some index files failed to download. They have been ignored, or old ones used instead.
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Calculating upgrade... Done
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Please can you give me steps to fix this?

You can try

sudo apt install curl
sudo curl -fsSLo /usr/share/keyrings/brave-browser-archive-keyring.gpg https://brave-browser-apt-release.s3.brave.com/brave-browser-archive-keyring.gpg
sudo apt update && sudo apt upgrade
1 Like

First do what @Forpli said
Second your problem is not related to secure boot and Zorin will not update secure boot, fwupd maybe can do it if your computer is recent, or if you have dual boot it will be with Windows.
If you don't have dual boot just disable secure boot in your bios.

1 Like

Welcome to the Forum!

Your Output is not a Secure Boot Issue. It is an Issue with the Brave Repo. Try what @Forpli already suggested.

If that shouldn't help, we have to check Your Sources and then try it with adding the Brave Repo new.

Thank you I now see my secure boot is disabled, which I will leave until after 26 June however what are steps in update my motherboard firmware (BIOS) to support the new 2023 certificates, allowing me to re-enable Secure Boot safely. What must I know i dont want to destroy my only laptop. Not sure i understood the part about brave ...that is the browser i use?

Yes, the problem shown in your terminal output is a problem with the brave browser. You get no updates for the brave browser at the moment because the signature key for the brave repository is missing.

2 Likes

The Output what You have posted is not related to Secure Boot. The mentioned Key is related to the Brave Repos where the Brave Browser comes from. This is the default Browser (the little orange Lion Icon in the Taskbar).

1 Like