Issue with hpuefi-mod on Z2 G4

[PhC59]

Hi,
I'm running RHEL 7.5 WS on Z240 and Z2 G4, same master used (kernel .3.10.0-862.14.4)

With Z240, I regularly use hp-flash/hpuefi-mod to manage BIOS FW and setup.

On Z2 G4, I'm unable to install hpuefi-mod, whatever the release tried (3.0-1, 3.01-1, 3.02-1) :

...

Running transaction
Installing : hpuefi-mod-3.02-1.x86_64
modprobe: ERROR: could not insert 'hpuefi': Required key not available
mknod: missing operand after ‘0’
Try 'mknod --help' for more information.
warning: %post(hpuefi-mod-3.02-1.x86_64) scriptlet failed, exit status 1
Non-fatal POSTIN scriptlet failure in rpm package hpuefi-mod-3.02-1.x86_64

...

And then, unable to load the module, and no device "/dev/hpuefi" as attended :

# /opt/hp/hp-flash/hp-repsetup
modprobe: ERROR: could not insert 'hpuefi': Required key not available
ERROR: Could not load module hpuefi
Make sure that the package hpuefi-mod is installed

#

Any idea ? Buggy package for the Z2 ?

PhC

[PhC59]

Hi,

tested with several other situations :

Z240 (kernel 3.10.0-862.14.4)    hpuefi-mod-3.00-1 : rpmbuild Ok, install. module Ok
                                                              hpuefi-mod-3.02-1 : rpmbuild Ok, install. module Ok

VM (kernel 3.10.0-862.14.4)    hpuefi-mod-3.02-1 : Build Ok, install. Ok

Z2 G4 (kernel 3.10.0-862.14.4)  hpuefi-mod-3.00-1 : Build Ok, install. NOk
                                                             hpuefi-mod-3.02-1 : Build Ok, install. NOk

Z2 G4 (kernel 3.10.0-1062, RHEL 7.7) hpuefi-mod-3.02-1 : Build Ok, install. NOk

Also tried with the tarball sources, other BIOS release...

What could be wrong or missing with the Z2 G4 ? Nobody is using hp-flash on Linux ?

PhC

[ovaltine7 · Accepted solution]

Check if you have enabled secure boot.  You cannot load unsigned kernel modules with secure boot is enabled.

[PhC59]

Secure Boot is disabled

PhC

[PhC59]

Well done Ovaltine7, you give me the good way to solve !
Although my BIOS setup looks correct, I've reset it to factory defaults, then customize again step by step (disabled Secure Boot, Turbo-boost, Fast Boot, etc).
Module 'hpuefi-mod' is now operational (and tool 'hp-flash' also).
Thanks
PhC