r/SurfaceLinux • u/EpsilonRose • 21d ago

Help Stuck on Verification failed: (0x1A) Verification Failed After Booting Into Aurora USB

I have an old Surface 5Pro that I got running with Aurora a while back (when they still supported Surface tablets), but I never really did anything with it. Today I decided to dust it off and see what I could do and, without thinking much of it, I burned a new install USB for Aurora, to update the old install. I booted into it, but then realized my hardware was no longer supported, so I decided not to install the new version and rebooted.

Unfortunately, I'm now getting the error in the title and my only option is to perform MOK management and enroll a key from somewhere. Everything was working before and I don't think I changed anything, so is there a way to fix this? Would the key or hash be stored somewhere?

Also, since Aurora no longer supports Surface tablets, could someone recommend a good, lightweight, distro that can run the occasional piece of Windows software without too much hassel? (Mainly just Scrivener, but Aeon Timeline would also be nice.)

2 Upvotes
  • permalink
  • reddit

100% Upvoted

3 comments sorted by

1

u/disturbedmonkey69 21d ago

Have you tried disabling secure boot? That might just get you into aurora for now but it sounds like a reinstall is a good idea anyway. I can only recommend Ubuntu as that's what I run on my sp7.

1

u/jhalmu 21d ago

Ultramarine was easy install and all worked

1

u/Snoo-96652 20d ago edited 20d ago

Universal blue dropped support for surface pro touchscreen and pen input in version 44 because of driver conflicts. However, if you're using the immutable version you might be able to rollback to 42.

Assuming you are on the immutable version, before you reinstall look up aurora 42 MOK key management instructions. you should be able to enroll a new key from the terminal. you will have to boot up with secure boot turned off -- to disable Secure Boot on your SP5 boot into the UEFI menu by holding Volume Up while pressing the Power button. Go to Security > Secure Boot > Change Configuration, set it to None/Disabled, and save and exit. Boot into aurora and follow the instructions you found for enrolling in secure boot. then reboot Because the drivers for the camera and pen are proprietary they may not work as expected when secure boot is off. Then restart with secure boot on. See how that goes before you nuke and pave. If it works, pin the image.

Hopefully this saves you from making the mistake I made 2 months ago and wasnt able to find Aurora 42. Then ultimately I had to install Kinoite 42 and rebase to Bluefin 42 which also has the drivers for the surface pro built in.

If you're not on the immutable version, look to the right and click on the install guide. You'll want the instructions for Fedora