LKBEN11501: Find out if Linux has been started with secure boot (ubuntu/kubuntu)


Symptom

You need to make shure your system has not been compromised at boot time

Cause

This is important for mobile device management (MDM) and compliance rules

Solution

On Ubuntu and Kubuntu 20.04.2 LTS you can find out if your system has been booted securely by running the following command:

sudo mokutil --sb-state

The result will be something like:

SecureBoot disabled or SecureBoot enabled. Here an example where the system has not been booted with secure boot.

Have fun.

Disclaimer:

The information provided in this document is intended for your information only. Lubby makes no claims to the validity of this information. Use of this information is at own risk!

About the Author

Author: Wim Peeters - Keskon GmbH & Co. KG

Wim Peeters is electronics engineer with an additional master in IT and over 30 years of experience, including time spent in support, development, consulting, training and database administration. Wim has worked with SQL Server since version 6.5. He has developed in C/C++, Java and C# on Windows and Linux. He writes knowledge base articles to solve IT problems and publishes them on the Lubby Knowledge Platform.

Latest update: 07-04-2022