{"id":395,"date":"2018-09-13T14:14:41","date_gmt":"2018-09-13T12:14:41","guid":{"rendered":"https:\/\/blog.chloesoe.ch\/?p=395"},"modified":"2018-11-03T12:22:04","modified_gmt":"2018-11-03T10:22:04","slug":"sign-vboxdrv-for-virtualbox-when-using-secure-boot","status":"publish","type":"post","link":"https:\/\/blog.chloesoe.ch\/?p=395","title":{"rendered":"Sign vboxdrv for VirtualBox when using Secure Boot"},"content":{"rendered":"<p>Sign <code>vboxdrv<\/code> so Secure Boot has no problem with it.  (<a href=\"https:\/\/askubuntu.com\/a\/768310\/733411\" title=\"Source AskUbuntu\">Source AskUbuntu<\/a>)<br \/>\nShort version:<\/p>\n<pre><code>sudo \/usr\/src\/linux-headers-$(uname -r)\/scripts\/sign-file sha256 ~\/.ssh\/MOK.priv .ssh\/MOK.der $(modinfo -n vboxdrv)\r\n<\/code><\/pre>\n<p>To create the keys <code>MOK.priv<\/code> and <code>MOK.der<\/code>, this steps are required:<\/p>\n<pre><code># create key pair\r\nopenssl req -new -x509 -newkey rsa:2048 -keyout MOK.priv -outform DER -out MOK.der -nodes -days 36500 -subj \"\/CN=Signing Key for Secure Boot\/\"\r\n\r\n# use mokutil to test, if the key is enrolled (should not, if you just created it)\r\nmokutil --test-key .ssh\/MOK.der\r\n\r\n# import key\r\nsudo mokutil --import .ssh\/MOK.der\r\n\r\n# sign vboxdrv\r\nsudo \/usr\/src\/linux-headers-$(uname -r)\/scripts\/sign-file sha256 .ssh\/MOK.priv .ssh\/MOK.der $(modinfo -n vboxdrv)\r\n\r\n# check vboxdrv and activate\r\nsudo modinfo -n vboxdrv\r\nsudo modprobe vboxdrv\r\n<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"<p>Sign vboxdrv so Secure Boot has no problem with it. (Source AskUbuntu) Short version: sudo \/usr\/src\/linux-headers-$(uname -r)\/scripts\/sign-file sha256 ~\/.ssh\/MOK.priv .ssh\/MOK.der $(modinfo -n vboxdrv) To create the keys MOK.priv and MOK.der, this steps are required: # create key pair openssl req -new -x509 -newkey rsa:2048 -keyout MOK.priv -outform DER -out MOK.der -nodes -days 36500 -subj &#8220;\/CN=Signing&#8230; <a href=\"https:\/\/blog.chloesoe.ch\/?p=395\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Sign vboxdrv for VirtualBox when using Secure Boot<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"class_list":["post-395","post","type-post","status-publish","format-standard","hentry","category-linux"],"_links":{"self":[{"href":"https:\/\/blog.chloesoe.ch\/index.php?rest_route=\/wp\/v2\/posts\/395","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.chloesoe.ch\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.chloesoe.ch\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.chloesoe.ch\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.chloesoe.ch\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=395"}],"version-history":[{"count":3,"href":"https:\/\/blog.chloesoe.ch\/index.php?rest_route=\/wp\/v2\/posts\/395\/revisions"}],"predecessor-version":[{"id":500,"href":"https:\/\/blog.chloesoe.ch\/index.php?rest_route=\/wp\/v2\/posts\/395\/revisions\/500"}],"wp:attachment":[{"href":"https:\/\/blog.chloesoe.ch\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=395"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.chloesoe.ch\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=395"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.chloesoe.ch\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=395"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}