Frequently Asked Question

Secure Boot and DKMS Driver Signature
Last Updated 2 years ago

In Linux operating systems a secure boot process allows only approved drivers to run and requires hardware driver signature. To support this feature, the driver installation method has been changed, allowing the user to choose to add KAYA’s driver to DKMS. The following steps explain the process of DKMS driver signing.

  1. You may check whether a secure boot is activated and enabled for your OS using the following utility command:
    mokutil --sb-state
    NOTE: In case the secure boot was not initially installed, this utility will not be present.
  2. Extract the provided .tar.gz file using the following terminal command:
    tar -zxvf KAYA_Vision_Point_Setup_2022.1_Ubuntu_20.04_x64.tar.gz
    NOTE: Installation archive name may vary
  3. Run the installation script located in the extracted folder using the following command:
    sudo sh install.sh
    NOTE: The installation process is also described in section 5.2 in "Vision_point_Installation_Guide".
  4. During the installation procedure DKMS will automatically sign the driver for the machine with the secure boot NOTE: This can be disabled by changing the DKMS="1" parameter to DKMS="0" in the kaya_driver_install.sh
  5. If secure boot is enabled, DKMS will try to sign the driver and the following message will pop up, in case systems MOK (Machine Owner Key) is NOT enrolled.

    image
  6. Read the message and press "ok"
  7. Create the password. Pay attention that it is a one-time password that you will need later.image
  8. After the installation is completed, reboot machine
  9. After computer reboot, the following dialog might be displayed on the screen. Choose "Enroll MOK" and follow the instructions shown below:

    a. image

    b. image

    c. image

    d. image

    e. image

  10. You may check the status of the driver using the following command:
    Systemctl status kaya_driver.service

Please Wait!

Please wait... it will take a second!