Ubuntu 24.04 LTS – Secure Boot blocks third-party kernel modules – Fix & Prevention

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution – Primary Fix
7. Solution – Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

Kernel modules such as NVIDIA or VirtualBox fail to load when Secure Boot is enabled.

Environment & Reproduction

Appears after driver installs requiring unsigned DKMS modules.

mokutil --sb-state
dmesg | grep -Ei 'secure boot|module verification' | tail -n 50

Root Cause Analysis

Unsigned kernel modules are rejected by UEFI Secure Boot policy.

Quick Triage

Identify failing module and signature state.

modprobe vboxdrv 2>/dev/null || true
modinfo nvidia 2>/dev/null | grep -i signer

Step-by-Step Diagnosis

Check MOK enrollment and module signing indicators.

mokutil --list-enrolled
dpkg -l | grep -E 'shim|mokutil|dkms'

Solution – Primary Fix

Enroll a Machine Owner Key and rebuild signed modules.

sudo dpkg-reconfigure shim-signed
sudo update-secureboot-policy --new-key
sudo update-secureboot-policy --enroll-key
sudo reboot

Solution – Alternative Approaches

Disable Secure Boot in firmware only if policy allows and risk is accepted.

sudo mokutil --sb-state

Verification & Acceptance Criteria

Affected modules load successfully with Secure Boot enabled.

mokutil --sb-state
lsmod | grep -E 'nvidia|vboxdrv'

Rollback Plan

Remove recently installed module packages if boot stability degrades.

sudo apt purge virtualbox-dkms -y
sudo apt autoremove -y

Prevention & Hardening

Use signed vendor drivers and document module signing workflow for admins.

sudo apt update && sudo apt upgrade -y

Related Errors & Cross-Refs

Related logs include module verification failed and key was rejected by service.

Related tutorial: View the step-by-step tutorial for Ubuntu 24.04 LTS.

View all Ubuntu 24.04 LTS tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

Ubuntu Secure Boot and MOK enrollment documentation.