@Tom-Elliott said in How to upgrade to FOG 1.6?:

@Tom-Elliott, Thank you very much for the comprehensive guide. All the necessary files for secure boot were signed correctly when upgrading from 1.5.10.1903 to 1.6.3200 I encountered a few problems, however. I’am now on 1.6.3279.

1. Secure boot

I set my dhcp server (FortiGate) to forward DHCP option 67 (set filename) “secureboot/snponly-shimx64.efi”. On my computers that already had an enroll key, so:
loading snponly-shimx64.efi OK
loading bzImage OK
no FOG task -> refind should be loaded -> SECURITY VIOLATION

I don’t know why, but for some unknown reason the file /var/www/fog/service/ipxe/refind_x64.efi is not loaded and the file refind.efi is loaded, which was not signed, so I signed them additionally and now the whole boot process works as it should, then no more secure boot errors.

root@fog:/var/www/fog/service/ipxe# sbverify --cert /root/sbkeys/FOG_SB.crt refind_x64.efi Signature verification OK root@fog:/var/www/fog/service/ipxe# sbverify --cert /root/sbkeys/FOG_SB.crt refind.efi warning: data remaining[237128 vs 262592]: gaps between PE/COFF sections? Signature verification failed root@fog:/var/www/fog/service/ipxe# sbsign --key /root/sbkeys/FOG_SB.key --cert /root/sbkeys/FOG_SB.crt --output refind.efi refind.efi warning: data remaining[237128 vs 262592]: gaps between PE/COFF sections? Image was already signed; adding additional signature root@fog:/var/www/fog/service/ipxe# sbverify --cert /root/sbkeys/FOG_SB.crt refind.efi Signature verification OK 2. Web GUI

In the menuStorage Node-> List All Storagegroups, I see a table with a list for only one row, but I have 12 storage groups created. I can scroll through them using the mouse wheel, but only one row is displayed. Tested in Firefox and Chrome on Windows 11.

storage_group.png

In the menuStorage Node -> List All Storagenodes, the same problem as the previous Storage Group.

3. iPXE menu

The new item “Enroll Secure Boot Key” did not appear in the iPXE menu, but I had to add it manually. I have FOG 1.6 installed as a clean installation in another virtual machine. Just for testing. In this clean installation, this iPXE menu item was there, but in the version upgraded from 1.5.10 it did not appear. I had some custom items added to the iPXE menu before the upgrade. Maybe that caused the new one not to be added?