Hello! I wanted to ask:
1. The Arch Linux Wiki has a section 3.2 Using a signed boot loader. Can I skip the previous sections and skip subsection 3.2.1 PreLoader and go straight to section 3.2.2 Shim?
2. If I change the boot loader to grubx64.efi and then if I don't finish section 3.2.2, will everything fail? Nothing will load? And if I leave the boot loader (aka boot.efi, right?) and grubx64.efi, will it crash?
3. Section 3.2.2.1.2 shim with key has:
$ openssl req -newkey rsa:4096 -nodes -keyout MOK.key -new -x509 -sha256 -days 3650 -subj "/CN=my Machine Owner Key/" -out MOK.crt
$ openssl x509 -outform DER -in MOK.crt -out MOK.cer
Should I write "/CN=my Machine Owner Key/" like this? Or do you need to write some sequence of characters? Tell me what to write?
P.S. If I make a mistake with any item, then everything will fly for me and it will not be possible to recover?
1. The Arch Linux Wiki has a section 3.2 Using a signed boot loader. Can I skip the previous sections and skip subsection 3.2.1 PreLoader and go straight to section 3.2.2 Shim?
2. If I change the boot loader to grubx64.efi and then if I don't finish section 3.2.2, will everything fail? Nothing will load? And if I leave the boot loader (aka boot.efi, right?) and grubx64.efi, will it crash?
3. Section 3.2.2.1.2 shim with key has:
$ openssl req -newkey rsa:4096 -nodes -keyout MOK.key -new -x509 -sha256 -days 3650 -subj "/CN=my Machine Owner Key/" -out MOK.crt
$ openssl x509 -outform DER -in MOK.crt -out MOK.cer
Should I write "/CN=my Machine Owner Key/" like this? Or do you need to write some sequence of characters? Tell me what to write?
P.S. If I make a mistake with any item, then everything will fly for me and it will not be possible to recover?
