UEFI dbx update on Linux

TastyParmesan

New member
Hi everyone,

I've just received Recoil Series 18" laptop, and I have some strange issue with UEFI dbx update (it's revocation list for keys used by Secure Boot). I'm using Ubuntu 24.04.2. fwupdmgr tool telling that there is an update from 20230501 to 20241101 for dbx. The update passes successfully, but after the reboot it shows that the list is not updated, and offers update again. Secure Boot is enabled. What I tried to do:

  1. Disable Secure Boot, then boot to OS and install the update. Doesn't work
  2. Remove dbx keys from UEFI shell manually, disable Secure Boot and install the update. Doesn't work
  3. Checked some articles, but nothing works
    1. On AskUbuntu
    2. On Reddit
It seems like BIOS doesn't keep the updated keys after the reboot, and restores it to manufacturer settings. Another possible approach is to update BIOS manually by using the flash drive. If it's possible, please advise me how to do that and where to get the firmware for Recoil motherboard.
 

Ekans2011

VALUED CONTRIBUTOR
please contact PCSpecialist support to obtain these, if you haven't done so already
FYI, PCS would not be able to offer support for OS other than Windows 11, so they may be unable to assist you with software issues.

1751462047359.png


 
Top