Preparing a boot device

Use the zipl command to prepare a boot device for secure boot.

About this task

The zipl boot loader program prepares Linux disks for boot. The zipl command automatically installs the secure boot disk format when you run it in an environment that supports secure boot, and if code signatures are available.

Tip: You can instruct zipl to always use the secure boot format by specifying the --secure=1 command-line parameter.

A Linux SCSI or NVMe boot disk prepared for secure boot does not boot in an environment that does not support secure boot.

The following commands can be used to reinstall the boot loader while forcing the use of secure boot. To reinstall without secure boot support, change the value 1 to 0.