History - installing 16.04 from usb, added my Security key, cancelled Secure boot and replaced installed Win10. Rebooted to nothing, no log in screen, no success, so decided a reinstall was the only option thinking it would be a repeat of the first attempt.
It wasn't, but it did boot up with the Invalid Signature message which is how it's been working since then.
I read the Debian EFI wiki about using efibootmgr and below is the output -
BootCurrent: 0000
Timeout: 0 seconds
BootOrder: 0008,0000,0001,0006,0007,0005,0004
Boot0000* ubuntu HD(1,GPT,70c9a33a-3e8b-4386-8c0d-ea912adc177e,0x800,0x100000)/File(\EFI\UBUNTU\SHIMX64.EFI)
Boot0001* rEFInd HD(1,GPT,70c9a33a-3e8b-4386-8c0d-ea912adc177e,0x800,0x100000)/File(\EFI\REFIND\REFIND_X64.EFI)
Boot0004* Generic Usb Device VenHw(99e275e7-75a0-4b37-a2e6-c5385e6c00cb)
Boot0005* CD/DVD Device VenHw(99e275e7-75a0-4b37-a2e6-c5385e6c00cb)
Boot0006* UEFI: IP4 Realtek PCIe FE Family Controller PciRoot(0x0)/Pci(0x2,0x5)/Pci(0x0,0x0)/MAC(d8cb8ad8b17f,0)/IPv4(0.0.0.0:0<->0.0.0.0:0,0,0)..BO
Boot0007* UEFI: IP6 Realtek PCIe FE Family Controller PciRoot(0x0)/Pci(0x2,0x5)/Pci(0x0,0x0)/MAC(d8cb8ad8b17f,0)/IPv6([::]:<->[::]:,0,0)..BO
Boot0008* ubuntu HD(1,GPT,70c9a33a-3e8b-4386-8c0d-ea912adc177e,0x800,0x100000)/File(\EFI\UBUNTU\GRUBX64.EFI)..BO
AIUI Boot0008 will be the original install as it uses grubefi while Boot0000 using shimx64 is the reason for the Secure boot message.
Will Win10 Secure Boot options still be on disc ie, if I reset the Timeout using efibootmgr so I have time to F8 or F10 or ESC or whatever, will that bring up a menu screen so I can disable Secure boot? My original Security key - will that still be on disc or can/should it be added to a file?
I can then delete Boot0000 and 0001 (rEFInd has been uninstalled everywhere).
OK, everything works but I'd prefer to have a tidy system just in case
Thanks
It wasn't, but it did boot up with the Invalid Signature message which is how it's been working since then.
I read the Debian EFI wiki about using efibootmgr and below is the output -
BootCurrent: 0000
Timeout: 0 seconds
BootOrder: 0008,0000,0001,0006,0007,0005,0004
Boot0000* ubuntu HD(1,GPT,70c9a33a-3e8b-4386-8c0d-ea912adc177e,0x800,0x100000)/File(\EFI\UBUNTU\SHIMX64.EFI)
Boot0001* rEFInd HD(1,GPT,70c9a33a-3e8b-4386-8c0d-ea912adc177e,0x800,0x100000)/File(\EFI\REFIND\REFIND_X64.EFI)
Boot0004* Generic Usb Device VenHw(99e275e7-75a0-4b37-a2e6-c5385e6c00cb)
Boot0005* CD/DVD Device VenHw(99e275e7-75a0-4b37-a2e6-c5385e6c00cb)
Boot0006* UEFI: IP4 Realtek PCIe FE Family Controller PciRoot(0x0)/Pci(0x2,0x5)/Pci(0x0,0x0)/MAC(d8cb8ad8b17f,0)/IPv4(0.0.0.0:0<->0.0.0.0:0,0,0)..BO
Boot0007* UEFI: IP6 Realtek PCIe FE Family Controller PciRoot(0x0)/Pci(0x2,0x5)/Pci(0x0,0x0)/MAC(d8cb8ad8b17f,0)/IPv6([::]:<->[::]:,0,0)..BO
Boot0008* ubuntu HD(1,GPT,70c9a33a-3e8b-4386-8c0d-ea912adc177e,0x800,0x100000)/File(\EFI\UBUNTU\GRUBX64.EFI)..BO
AIUI Boot0008 will be the original install as it uses grubefi while Boot0000 using shimx64 is the reason for the Secure boot message.
Will Win10 Secure Boot options still be on disc ie, if I reset the Timeout using efibootmgr so I have time to F8 or F10 or ESC or whatever, will that bring up a menu screen so I can disable Secure boot? My original Security key - will that still be on disc or can/should it be added to a file?
I can then delete Boot0000 and 0001 (rEFInd has been uninstalled everywhere).
OK, everything works but I'd prefer to have a tidy system just in case
Thanks