Steve, Thanks, but unfortunately the shim-signed package still has another problem.
It deps on a grub2-common version that is not available (see comment #26). -Depends: <...> grub2-common (>= 2.02~beta2-9ubuntu1.14), mokutil +Depends: <...> grub2-common (>= 2.02~beta2-36ubuntu12), mokutil So, it fails to install: $ sudo apt-get install shim-signed grub2-common <...> The following packages have unmet dependencies: shim-signed : Depends: grub2-common (>= 2.02~beta2-36ubuntu12) but 2.02~beta2-9ubuntu1.15 is to be installed <...> It seems a leftover from Xenial (which ships grub2 version 2.02~beta2-36ubuntu3.18 now) that unfortunately breaks Trusty. Thus d-i can't yet build on trusty-proposed. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1708245 Title: shim can't enable validation and enroll keys in one sitting To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1708245/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs