UC-20 can't be installed successfully with TPM 2.0 and secure boot enabled.

[Jerry Lee]

I used a Dell laptop with TPM 2.0 and secure boot enabled.
I tried to install UC-20 on this laptop but the installation process hung and without response finally.
The tested image: http://cdimage.ubuntu.com/ubuntu-core/20/beta/20201117.3/ubuntu-core-20-amd64.img.xz

The last screen is captured as 2 pictures and are attached here.
The key messages are:

picture#1:(uc20-fail-1.jpg)
  "gadget does not support encrypted data: volume "pc" has no structure with system-save role"

picture#1:(uc20-fail-2.jpg)
  "error: cannot set device information: No option model in section"

Besides, I did some testings on the same Dell laptop and the results are for references:
(1) Both TPM 2.0 and secure boot were NOT enabled
  Both UC-18 and UC-20 can be installed
(2) Both TPM 2.0 and secure boot were enabled
  UC-18 can be installed.

[Jerry Lee (jerry-lee-tpe)]

Attache the 2nd picture

[Ian Johnson (anonymouse67)]

Hi, we are in the process of trying to get all the bits in place for a final UC20 1.0 release, and unfortunately for encryption support, the gadget snap is slightly behind in that the gadget snap does not define the ubuntu-save partition yet, but it should be released to the beta channel shortly and when that is included in the image it should work.

Your result that if secure boot is disabled, then you can install UC20 is expected since ubuntu-save is only necessary for encryption support (it is optional for unencrypted installs), and secure boot is required for full disk encryption support.

[Ian Johnson (anonymouse67)]

Hi jerry-lee-tpe, can you test the released UC20 images with this now? All of the gadget snaps should be updated now with ubuntu-save.

[Jerry Lee (jerry-lee-tpe)]

@anonymouse67

I don't have the machine (model: Latitude 5511) at hands now...
Please close this case, I will report if I see the same error again.

Thanks