What is this?

SethStorm666

Is it save to install? Or should I install it?

Lucien_Lachance

i believe its secure boot keys, i read somewhere they need to be updated before october if you use secure boot

SethStorm666

Okay, I guess I don't need them.

Original-Syn

SethStorm666 I recommend updating them. While primarily for secure boot it also helps against some uefi/bios malware.

Lucien_Lachance

SethStorm666 skipping them too, unless i hear otherwise

Original-Syn

Lucien_Lachance Mentioned just above yours as someone that works in the cyber world I do actually recommend installing it for security reasons even if not using secure boot.

I know we see the Microsoft name on there, but the unfortunate thing is they are the managing org for the keys. Which i think should not be allowed myself.

SethStorm666

Original-Syn

I did hesistated as it said something Microsoft, but now I have them installed.

divadgnol67

Hey Seth, do you have any interest in helping me achieve the same desktop appearance as you?

I am new to Solus. It appears you are using Plasma but I am not familiar with KDE

SethStorm666

divadgnol67 Please start a new thread and we have a look at it. Meanwhile you need to install Solus - Plasma edition. Some of the lements in the screenshot are not available as I made them myself, but most you can do.

divadgnol67

SethStorm666 Thank you! I have budgie installed but will install plasma and start a new thread.

SethStorm666

I have now installed them and rebooted, so I guess it's that.

banger

SethStorm666 They are usually issued by the motherboard manufacturer. I know it's confusing having MS in the title but MS is the central repository for the keys usually signed by motherboard manufacturers.

Lucien_Lachance

those are not from the solus repos though are they? only appear in gnome sh*tware/discover
so if you only use terminal (like me) you woudlnt normally know about them

banger

Lucien_Lachance those are not from the solus repos though are they? only appear in gnome sh*tware/discover
so if you only use terminal (like me) you woudlnt normally know about them

They are usually installed by fwupdmgr which runs in the background. Apparently Discover has a hook for fwupdmgr.

You can check your system fwupdmgr -v

Original-Syn

banger This is correct and the software manager ties into it which is why you see it there.

brent

banger They are usually installed by fwupdmgr which runs in the background. Apparently Discover has a hook for fwupdmgr.

and users should only do firmware stuff with that command or let solus.

Original-Syn the software manager ties into it which is why you see it there.

True. When gnome-software informs me about firmware I do not trust it to handle this stuff. Wouldn't trust discover either. both unstable middlemen and nothing ever good comes with middlemen..

updating this stuff was the right thing to do but I would not say Discover is the right tool for the task,

just two cents

Original-Syn

brent I do not personally use it either. I have a universal updater fish alias script that checks distro updates (based on installed package manager), Flatpaks, distrobox, and firmware.

I have had it for years as it works across most distros. Even though I am mainly Solus now. I do a lot of testing so it is a nice to have. That way all updates are native.

seanragout

Updated both of those, did unconsciously think it would break the system closed my eyes when rebooting....all is well!

Sticky

wait...I thought Solus doesn't support secure boot? I had to turn that off for the usb boot to work....

Lucien_Lachance

Sticky its done for some time i think, but ive never tried myself

Original-Syn

Sticky It does indeed support secure boot, since 4.4. It is a requirement for my work laptop.
https://help.getsol.us/docs/user/quick-start/installation/secure-boot

BuzzPCSOS

Sticky To some extent it depends on what boot media you are using.
Ventoy seems to be a little picky about what machines can be secure booted and requires you to import a secure key from the Ventoy OS and then reboot. The second time you will be required to import a key from the Solus ISO. It is easy to think the whole thing has failed if you are not expecting that behaviour.
Other "boot ISO from USB" software will only need the one key to be imported from the Solus ISO but you still need to reboot after importing the key.