Solved Unable to install any linux distribution on ASUS motherboard

[punklearninglinux]

Hi,

Thank you for taking the time to read this post.

I am relatively new to Linux. I built a new PC with two drives. I first installed Windows and all is working with it. On the second drive I wanted to install Ubuntu. I removed the Windows drive to avoid issues but I am unable to get past the Grub menu. I have tried all sorts of boot menu commands I could find on this and other forums but am stuck and can't boot in. Here are the details:

System information:
Motherboard: ASUS Pro WS WRX80E-SAGE SE WIFI II
CPU: AMD Threadripper Pro 5955WX
GPU: RTX 3090
RAM: 2 ECC OWC 64 GB DDR4 sticks
Keyboard: Logitech Keyboard
Mouse: Logitech Trackball
NVME SSD: WD 2TB

Bios settings:
Secure Boot: Other OS (no option to disable it)
CSM: Disabled
All other options left same as default
Firmware updated to latest 1602 version

Following are the errors I get:

acpi: module verification failed: signature and/or required key missing - tainted kernel
(followed by other log messages)
Unable to find a medium containing a live file system

Then it drops into initramfs


There are no USB 2.0 headers in the rear, so I have tried with USB 3.0 rear of the board, along with a USB 2.0 header cable connected to the board; none of them work and same errors occur for all.

I have tried multiple USB drives with bootable set up from Rufus and balenaEtcher using both MBR and GPT versions. Exact same errors on both. I have tried Popl_OS and Ubuntu and both give similar acpi errors.

I have replicated this problem also by removing all drives and simply trying to boot with the USB, no difference in errors.

I am completely out of ideas; I believe it has to do with my board or some setting which I am not sure how to fix. Here is the Bios Manual (https://dlcdnets.asus.com/pub/ASUS/mb/Socket sTRX4/PRO_WS_WRX80E-SAGE_SE_WIFI_II/E22244_PRO_WS_WRX80E-SAGE_SE_WIFI_II_BIOS_Manual_EM_V2_WEB.pdf) if you can help identify it.

Thank you for your help. I want to get this up and running for an AI project I have been meaning to work on. I will revert to Windows sadly if I can't set it up, but it should not be this hard right?

Much appreciate your help.

 

[Condobloke]

G'day punk, Welcome to Linux.org

Bios settings:
Secure Boot: Other OS (no option to disable it)

To access secure boot, in bios, go to either security or boot.

Find 'Supervisor Password' enable it and give it a password.....keep the password SIMPLE

Then disable the supervisor password

You should then see secure boot in either security or boot

 

[CaffeineAddict]

acpi: module verification failed: signature and/or required key missing - tainted kernel

ACPI (Advanced Configuration and Power Interface) modules are not signed and since secure boot is enabled boot fails.

like @Condobloke said, there is mobo specific method to disable secure boot, you just have to find a way.

 

[f33dm3bits]

Secure Boot: Other OS (no option to disable it)

I have an Asus motherboard and that's the way to disable it, when I have it set to that it displays.

[ 0.000000] secureboot: Secure boot disabled
[ 0.002981] secureboot: Secure boot disabled
[ 3.807288] amdgpu 0000:03:00.0: amdgpu: SECUREDISPLAY: securedisplay ta ucode is not available
[ 4.681424] amdgpu 0000:0e:00.0: amdgpu: SECUREDISPLAY: securedisplay ta ucode is not available

You can try setting the second option to custom but that shouldn't make a difference I would think. My system works with secure boot enabled.

That's one hell of a motherboard and expensive!

 

[The Duck]

Here's the manual.

Pro WS WRX80E-SAGE SE WIFI II｜Motherboards｜ASUS USA

AMD WRX80 Ryzen™ Threadripper™ PRO extended-ATX workstation motherboard with Intel dual 10G LAN, USB 3.2 Gen 2x2 Type-C port, PCIe 4.0 x16 slots, M.2 PCIe 4.0, ASMB9-iKVM, U.2, and WIFI 6E

www.asus.com

Here's the bios manual.

https://dlcdnets.asus.com/pub/ASUS/mb/Socket%20sTRX4/PRO_WS_WRX80E-SAGE_SE_WIFI_II/E22244_PRO_WS_WRX80E-SAGE_SE_WIFI_II_BIOS_Manual_EM_V2_WEB.pdf?model=Pro%20WS%20WRX80E-SAGE%20SE%20WIFI%20II

Go to page 74 and look for secure boot and it will give you options.

 

[punklearninglinux]

G'day punk, Welcome to Linux.org


To access secure boot, in bios, go to either security or boot.

Find 'Supervisor Password' enable it and give it a password.....keep the password SIMPLE

Then disable the supervisor password

You should then see secure boot in either security or boot

Thank you for your reply. I tried it, no luck so far:

Main > Security > I set the Admin password and then rebooted, then went and removed the password as suggested. The Secure boot options under Boot menu remained the same with two options Windows and Other OS. Tried them both with same results.

 

[punklearninglinux]

ACPI (Advanced Configuration and Power Interface) modules are not signed and since secure boot is enabled boot fails.

like @Condobloke said, there is mobo specific method to disable secure boot, you just have to find a way.

Thank you, gave it a shot, but same results.

 

[punklearninglinux]

I have an Asus motherboard and that's the way to disable it, when I have it set to that it displays.

You can try setting the second option to custom but that shouldn't make a difference I would think. My system works with secure boot enabled.

That's one hell of a motherboard and expensive!

Where do you see that display?

 

[punklearninglinux]

Here's the manual.

Pro WS WRX80E-SAGE SE WIFI II｜Motherboards｜ASUS USA

AMD WRX80 Ryzen™ Threadripper™ PRO extended-ATX workstation motherboard with Intel dual 10G LAN, USB 3.2 Gen 2x2 Type-C port, PCIe 4.0 x16 slots, M.2 PCIe 4.0, ASMB9-iKVM, U.2, and WIFI 6E

www.asus.com

Here's the bios manual.

https://dlcdnets.asus.com/pub/ASUS/mb/Socket%20sTRX4/PRO_WS_WRX80E-SAGE_SE_WIFI_II/E22244_PRO_WS_WRX80E-SAGE_SE_WIFI_II_BIOS_Manual_EM_V2_WEB.pdf?model=Pro%20WS%20WRX80E-SAGE%20SE%20WIFI%20II

Go to page 74 and look for secure boot and it will give you options.

Thank you. Reviewed the manual which also lists these two as default options; tried them both with same results. However, under the Secure Boot section, it says I have saved keys, should I try to clear them? I don't want to disrupt my windows boot though?

 

[CaffeineAddict]

Thank you, gave it a shot, but same results.

What do you mean by "gave it a shot"? disabled secure boot and not working?
What I said is you need to disable secure boot, so if you gave it a shot and it's still not working then something else is problem.

 

[punklearninglinux]

What do you mean by "gave it a shot"? disabled secure boot and not working?
What I said is you need to disable secure boot, so if you gave it a shot and it's still not working then something else is problem.

Hi,

So there are only two options under Secure Boot (as listed in this manual on page 74) "Windows UEFI" and Other OS. I tried both of them, then plugged in the USB with linux bootable ISO (both for Popl and Ubuntu); it gives me the acpi error I mentioned earlier and then drops into initramfs. I am not able to find an option that truly says to disable it. The only option close to it is Other OS.

 

[f33dm3bits]

Where do you see that display?

That's once Linux is booted when you type "dmesg" in te terminal and search for secure.

What do you mean by "gave it a shot"? disabled secure boot and not working?

Secure Boot: Other OS (no option to disable it)

Having selected "Other OS" means secure boot is disabled, I tested it on my Asus motherboard.

 

[CaffeineAddict]

Having selected "Other OS" means secure boot is disabled, I tested it on my Asus motherboard.

That's the most strange naming to disable secure boot I've ever heard of.

 

[f33dm3bits]

That's the most strange naming to disable secure boot I've ever heard of.

It's been named like that on all the most recent motherboards I've had. It also mentions it in the motherboard manual that @The Duck linked.

Other OS - Get optimized function when boot on Windows none-UEFI mode. Microsoft Secure boot only supports Windows UEFI mode.

Seems like a bug in the motherboards firmware if it actually doesn't disable secure boot since that error mentioned does make it sound like secure boot is still enabled.

 

[f33dm3bits]

This is from an AI engine but should be fairly accurate because I have done it myself and it's faster than having to type it out myself.

1. Enter the BIOS by restarting your computer and pressing the Delete key repeatedly during startup.
2. Once in the BIOS, press F7 to switch to Advanced Mode.
3. Navigate to the "Boot" tab.
4. Find the "Secure Boot" option and select it.
5. Change the "OS Type" setting from "Windows UEFI mode" to "Other OS". This will effectively disable Secure Boot.
6. Press F10 to save the changes and exit the BIOS.
7. Your system will restart with Secure Boot disabled.

If that doesn't work you can try clearing your secure boot keys, this is also generated by an AI engine.

If you encounter any issues or the Secure Boot option is grayed out, you may need to:

1. Go to "Advanced > Boot > Secure Boot > Key Management".
2. Select "Clear Secure Boot Keys"

 

[CaffeineAddict]

5. Change the "OS Type" setting from "Windows UEFI mode" to "Other OS". This will effectively disable Secure Boot.

@f33dm3bits
Will that also enable CSM? disable UEFI?

edit:
I don't think clearing keys is wise since this will put BIOS into setup mode.

 

[f33dm3bits]

Will that also enable CSM? disable UEFI?

No that doesn't enable CSM and doesn't disable UEFI boot. In modern motherboards that isn't even an option anymore, at least all the recent ones I have seen so far that came out in the last 2-3 years.

 

[f33dm3bits]

I don't think clearing keys is wise since this will put BIOS into setup mode.

You can reset the keys if needed might be worth to see if you do this it will trigger secure boot to be disabled since it doesn't seem to get disabled now even though OP says it's set on "Other OS" now.

 

[CaffeineAddict]

acpi: module verification failed: signature and/or required key missing - tainted kernel
(followed by other log messages)
Unable to find a medium containing a live file system

So acpi message above is not an error but informational message.

The error is "Unable to find a medium containing a live file system"
This suggests you need use boot menu to boot from USB, or alternatively enter BIOS and set boot order so that USB is listed first.

I removed the Windows drive to avoid issues but I am unable to get past the Grub menu.

If you already installed Linux from USB to drive the same procedure with boot menu, but making sure boot order starts with the drive.

Which stage leads you go grub menu? install from USB or boot from already installed Linux to drive?

 

[dos2unix]

If I was dual booting Linux/Windows I would use a distro that supported secure boot, so I don't have to go into the BIOS and enable/disable every time I wanted to change the OS.
In fact I am doing it this way now.