New: VirtIO Windows Drivers doesn't support SecureBoot.
https://bugzilla.kernel.org/show_bug.cgi?id=190131
Bug ID: 190131
Summary: VirtIO Windows Drivers doesn't support SecureBoot.
Product: Virtualization
Version: unspecified
Kernel Version: 4.4.0
Hardware: x86-64
OS: Linux
Tree: Mainline
Status: NEW
Severity: normal
Priority: P1
Component: kvm
Assignee: [email protected]
Reporter: [email protected]
Regression: NoVirtIO Windows Drivers doesn't support SecureBoot(SecureBoot via OVMF).Windows will prompt "Invalid Digital Signature" when install VirtIO Drivers(Such as NetKVM,VirtIO SCSI drivers) in Windows.
Signature · 2 lines
You are receiving this mail because: You are watching the assignee of the bug.
[Bug 190131] VirtIO Windows Drivers doesn't support SecureBoot.
https://bugzilla.kernel.org/show_bug.cgi?id=190131
[email protected] changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |[email protected]
--- Comment #1 from [email protected] ---
Any updates on this? I am also seeing the error during boot if SecureBoot via OVMF is enabled.
According to MS new driver signing policy, Windows 10 1607 and newer versions require the drivers to be signed via their Dev Portal. Cross-signed drivers, will not load when Secure Boot is enabled in the BIOS. Fedora's virtio drivers are cross-signed and therefore were not being loaded.
Signature · 2 lines
You are receiving this mail because: You are watching the assignee of the bug.
[Bug 190131] VirtIO Windows Drivers doesn't support SecureBoot.
In reply to [email protected]https://bugzilla.kernel.org/show_bug.cgi?id=190131
[email protected] changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |[email protected]
--- Comment #2 from [email protected] ---
The drivers need to be WHQL or attestation signed to work with UEFI/Secure Boot. If you're using upstream drivers available through e.g. fedoraproject.org it definitely will not work. Please see
https://docs.fedoraproject.org/en-US/quick-docs/creating-windows-virtual-machines-using-virtio-drivers/index.html
Signature · 2 lines
You are receiving this mail because: You are watching the assignee of the bug.
[Bug 190131] VirtIO Windows Drivers doesn't support SecureBoot.
In reply to [email protected]https://bugzilla.kernel.org/show_bug.cgi?id=190131
--- Comment #3 from Vadim Rozenfeld ([email protected]) --- Please see the following RH bug for your reference
https://bugzilla.redhat.com/show_bug.cgi?id=1844726
Signature · 2 lines
You are receiving this mail because: You are watching the assignee of the bug.