ubuntu@jammy-amd64-secure-boot:~$ uname -a Linux jammy-amd64-secure-boot 6.8.0-1008-azure #8~22.04.1-Ubuntu SMP Tue May 21 16:38:10 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux ubuntu@jammy-amd64-secure-boot:~$ sudo dmesg|grep -i "secure boot" [ 0.000000] secureboot: Secure boot enabled [ 0.000000] Kernel is locked down from EFI Secure Boot mode; see man kernel_lockdown.7 [ 0.014983] secureboot: Secure boot enabled [ 2.106052] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing: 61482aa2830d0ab2ad5af10b7250da9033ddcef0' [ 2.109047] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (2017): 242ade75ac4a15e50d50c84b0d45ff3eae707a03' [ 2.111878] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (ESM 2018): 365188c1d374d6b07c3c8f240f8ef722433d6a8b' [ 2.115041] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (2019): c0746fd6c5da3ae827864651ad66ae47fe24b3e8' [ 2.117881] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (2021 v1): a8d54bbb3825cfb94fa13c9f8a594a195c107b8d' [ 2.120083] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (2021 v2): 4cf046892d6fd3c9a5b03f98d845f90851dc6a8c' [ 2.122211] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (2021 v3): 100437bb6de6e469b581e61cd66bce3ef4ed53af' [ 2.124970] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (Ubuntu Core 2019): c1d57b8f6b743f23ee41f4f7ee292f06eecadfb9' [ 2.198411] integrity: Loaded X.509 cert 'SomeOrg: Secure Boot Signing: 1591bdab18db9a6781b7cf89969b673970971481'
I was unable to get arm64 keys enrolled, but since amd64 worked I think we can assume arm64 is good to go as well.
ubuntu@ jammy-amd64- secure- boot:~$ uname -a secure- boot 6.8.0-1008-azure #8~22.04.1-Ubuntu SMP Tue May 21 16:38:10 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux jammy-amd64- secure- boot:~$ sudo dmesg|grep -i "secure boot" 2ad5af10b7250da 9033ddcef0' 50d50c84b0d45ff 3eae707a03' 07c3c8f240f8ef7 22433d6a8b' 827864651ad66ae 47fe24b3e8' 94fa13c9f8a594a 195c107b8d' 9a5b03f98d845f9 0851dc6a8c' 9b581e61cd66bce 3ef4ed53af' 3ee41f4f7ee292f 06eecadfb9' 781b7cf89969b67 3970971481'
Linux jammy-amd64-
ubuntu@
[ 0.000000] secureboot: Secure boot enabled
[ 0.000000] Kernel is locked down from EFI Secure Boot mode; see man kernel_lockdown.7
[ 0.014983] secureboot: Secure boot enabled
[ 2.106052] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing: 61482aa2830d0ab
[ 2.109047] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (2017): 242ade75ac4a15e
[ 2.111878] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (ESM 2018): 365188c1d374d6b
[ 2.115041] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (2019): c0746fd6c5da3ae
[ 2.117881] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (2021 v1): a8d54bbb3825cfb
[ 2.120083] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (2021 v2): 4cf046892d6fd3c
[ 2.122211] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (2021 v3): 100437bb6de6e46
[ 2.124970] Loaded X.509 cert 'Canonical Ltd. Secure Boot Signing (Ubuntu Core 2019): c1d57b8f6b743f2
[ 2.198411] integrity: Loaded X.509 cert 'SomeOrg: Secure Boot Signing: 1591bdab18db9a6
I was unable to get arm64 keys enrolled, but since amd64 worked I think we can assume arm64 is good to go as well.