Been using Zorin for a while with no real problems until now. There's an update problem, and get message it's not working. What's the difference between download and install? Neither of them work. Anyway, don't know what it's for.
Some users are currently experiencing this problem. There are several threads about it, but there doesn't seem to be a solution yet. The Zorin group has already been informed about it, so we are currently hoping that it will be fixed soon.
It is an update for secure boot that updates the firmware.
Thanks. Good to know. Thought it might have been because it gpt pc and installed with mbr
1 Like
Here are the threads to this problem:
Thanks.
1 Like
I have had the same issue on both my laptops using 17.3 for 3 days now. Nothing has resolved this regardless of all suggestions.
hope it get fixed. only on linux because of zorin and everything works but this problem changes that
Hi and welcome. There is a security flaw in UEFI, courtesy of MS bad coding, reported by @zenzen on another thread:
1 Like
I see. This update is the patch if you use secure boot. The key point here ... "These vulnerabilities often require initial physical access. "
Might just stick with the formula and use MBR instead of GPT. Seems to work the same
1 Like
I have also install Zorin 17.3 Lite on another machine with a new SSD and no Microsoft OS ever been installed on it. This morning it now has the same failed update. It is not a MS issue.
Oh, whilst the issue relates to GNU/Linux it is a Microsoft caused issue due to a software house using an Certificate from 2011 which created the CVE security issue in the first place. Microsoft has issued an update that has deleted old hashes, and the new update doesn't get installed. I doubt that the GRUB2 and shim is the issue. I have posted elsewhere that you should try to remove the existing fwupdmgr package and install a newer release. This is a direct result of Microsoft instigating UEFI in the first place, because let's face it, Microsoft products are less secure than GNU/Linux. When GNU/Linux needs to apply a firmware-update created as a result of Microsoft's instigation of UEFI, then yes, technically it is a Microsoft issue - they have only fixed the issue affecting Windows users with a Tuesday update - there is however a second CVE threat which affects GNU/Linux users more than Windows users that still has not been addressed. If you are using Secure Boot, this is a Microsoft option, not a GNU/Linux one.
To put things into perspective:
But I would not use this as a dsily driver as it is a security issue in itself!
I only download these to get the walls and then scrub it!
New pc have secure boot. When Microsoft updates the Windows DBX, Linux updates its DBX as well to maintain compatibility and security.
The solution... install win 11, get all the updates, then reinstall Zorin 
In theory, it should work?
Did it?
it won't if there's bugs in the updater
Zoran, i succeeded with your proposal. I installed Win11 on my Lenovo L540. Within win11 I found a tool under firmware update dbx and run the app. Reinstalled Zorin Pro 17.3 and the error in gone.
1 Like
Great! Pleased to hear 
Hi zoran, me happiness last for 24 hours and then the error message came back again. I will try your setup this time, maybe something was update.
Wouldn't bother, would wait for developers solution. No DBX update message here, but Secure Boot disabled, but that's the PC makers default.
(Was getting same problem in Zorin with another PC, though secure boot was disabled, but switching to Pop, it updated the firmware regardless, so not really a case of secure/unsecured boot)
@cathorse, did you try the solution in this thread?
1 Like