Inscripción de Clave de Propietario de Máquina
Esta página documenta cómo inscribir una clave de propietario de máquina que se crea durante la instalación del controlador de Nvidia (normalmente en el software GNOME).
Requisito Previo
The Nvidia driver has been installed and a machine owner key to self-sign the driver has been created in GNOME Software (or in a similar tool that supports it).
Enrolling Self-signing Key after Reboot
In order to successfully reboot to Fedora Workstation after the Nvidia driver installation, you have to enroll the machine owner key you created during installation in GNOME Software. During rebooting you’ll be presented with the mokutil tool, follow the below steps to enroll the key:
-
Press any key to continue.
-
Select Enroll MOK.
-
Select Continue to proceed to the enrollment.
-
Select Yes to enroll the key.
-
Type the password you created for the key during installation.
-
Select Reboot to reboot into the OS with the Nvidia drivers enabled.
Security Implications
Note that the enrolled machine owner key will be used to sign any future updates to the module or any other module you will decide to install and they will be implicitly trusted. All future updates will happen transparently with no interaction and/or authorization. Therefore, it’s recommended to delete the machine owner key when it’s no longer needed.
Deleting Machine Owner Key
To delete the machine owner key, perform the following command in the terminal:
+
$ sudo mokutil --delete /etc/pki/akmods/certs/public_key.der
Want to help? Learn how to contribute to Fedora Docs ›