Linux files that require a signature

Edit online

Certain files must have a signature to work with secure boot.

If a required file lacks a signature and secure boot was selected, the IPL fails. For secure boot, the following Linux files must be signed:

Table 1. Linux files that require a signature
Distribution File names Package
Red Hat® Enterprise Linux®
  • /boot/vmlinuz-<version>
  • /lib/s390-tools/stage3.bin
  • kernel-core
  • s390utils-core
SUSE Linux Enterprise Server
  • /boot/image-<version>
  • /boot/zipl/image-<version>
  • /lib/s390-tools/stage3.bin
  • kernel-default
  • kernel-default (updated by grub2-install)
  • s390-tools
Ubuntu Server
  • /boot/vmlinuz-<version>
  • /lib/s390-tools/stage3.bin
  • linux-image
  • s390-tools-signed