How To Install shim-signed on Ubuntu 18.04

In this tutorial we learn how to install shim-signed on Ubuntu 18.04. shim-signed is Secure Boot chain-loading bootloader (Microsoft-signed binary)

Introduction

In this tutorial we learn how to install shim-signed on Ubuntu 18.04.

What is shim-signed

shim-signed is:

This package provides a minimalist boot loader which allows verifying signatures of other UEFI binaries against either the Secure Boot DB/DBX or against a built-in signature database. Its purpose is to allow a small, infrequently-changing binary to be signed by the UEFI CA, while allowing an OS distributor to revision their main bootloader independently of the CA.

This package contains the version of the bootloader binary signed by the Microsoft UEFI CA.

There are three methods to install shim-signed on Ubuntu 18.04. We can use apt-get, apt and aptitude. In the following sections we will describe each method. You can choose one of them.

Install shim-signed Using apt-get

Update apt database with apt-get using the following command.

sudo apt-get update

After updating apt database, We can install shim-signed using apt-get by running the following command:

sudo apt-get -y install shim-signed

Install shim-signed Using apt

Update apt database with apt using the following command.

sudo apt update

After updating apt database, We can install shim-signed using apt by running the following command:

sudo apt -y install shim-signed

Install shim-signed Using aptitude

If you want to follow this method, you might need to install aptitude first since aptitude is usually not installed by default on Ubuntu. Update apt database with aptitude using the following command.

sudo aptitude update

After updating apt database, We can install shim-signed using aptitude by running the following command:

sudo aptitude -y install shim-signed

How To Uninstall shim-signed on Ubuntu 18.04

To uninstall only the shim-signed package we can use the following command:

sudo apt-get remove shim-signed

Uninstall shim-signed And Its Dependencies

To uninstall shim-signed and its dependencies that are no longer needed by Ubuntu 18.04, we can use the command below:

sudo apt-get -y autoremove shim-signed

Remove shim-signed Configurations and Data

To remove shim-signed configuration and data from Ubuntu 18.04 we can use the following command:

sudo apt-get -y purge shim-signed

Remove shim-signed configuration, data, and all of its dependencies

We can use the following command to remove shim-signed configurations, data and all of its dependencies, we can use the following command:

sudo apt-get -y autoremove --purge shim-signed

References

Summary

In this tutorial we learn how to install shim-signed package on Ubuntu 18.04 using different package management tools: apt, apt-get and aptitude.