"Secure boot violation - invalid signature detected" Ubuntu 24.04 LTS

[currentshaft]

I just got a new Thinkpad Z13 Gen 2, which came with Windows.

I am not able to install Ubuntu 24 without disabling Secure Boot in BIOS or I get the warning "Secure boot violation - invalid signature detected"

Even if I disable Secure Boot to install Ubuntu 24, I cannot enable Secure Boot back or I get the error again.

My previous Thinkpad has Ubuntu 22 and Secure Boot is enabled.

Can anyone help understand what's wrong here? I checked the Secure Boot key management settings on both computers and they look the same. Thank you!

[currentshaft]

The solution was to enable "third-party" UEFI certificates in BIOS. After that, I can install Ubuntu and even use Secure Boot.

It is truly incredible the extent to which Microsoft goes to screw users with their systems.

[fyfe54]

Can you mark this as "solved" please?