loading kernel with secure boot

[Victor]

(2019-03-06 01:43)NiKiZe Wrote:  How did you sign the efi build of iPXE?
is kernel and iPXE signed by different keys, or the same?

iPXE just sends the binary to the EFI firmware which does the verification, so it must be that the firmware somehow denies this.
I also think that this can be seen in the error code returned - could you please post the _full_ error message you get from iPXE (this includes the ipxe.org url) please make sure you post the message - and not the resulted redirected url.

Hello,
Thank for your reply.
I signed the efi build of Ipxe with sbsign --key "path to key" --cert "path to cert" "path to ipxe efi".
The kernel and the ipxe efi are both signed with the same key. If I try to boot the same kernel (downloaded from the server) from a USB stick it works.

The error message I get: "Could not select: Exec format error (https://ipxe.org/2e008081)".

I hope this helps.