Firmware signature missing or not trusted (but it should be signed correctly) #6646
Labels
Comments
|
Another report (i've deduped above) has: which is also for a Lenovo T16 Gen 1, not this model. |
|
Interestingly, on a hunch: jcat 0.1.14: jcat 0.2.0: debugging now. |
|
Same here, force updated by setting OnlyTrusted=false (Work on my P14s Gen 3 try at your own risk) |
Okay, I've worked out the root cause (wrong order for the jcat fallback on the LVFS) which is only triggering as the firmware just crept past 64MiB in size. I'm working on a LVFS fix (and libjcat enhancement...) and also a repair action to auto-resign any affected firmware. |
|
LVFS fix is https://gitlab.com/fwupd/lvfs-website/-/commit/013fd574235d2864e7f56a5c88df1d2d13257fca and libjcat (just cosmetic and documentation, no need to release/update) is here: hughsie/libjcat#87 It'll take a few mins to deploy the LVFS, and quite a few minutes to resign the affected firmware, but I'll ping this issue when it's all ready for testing. |
|
Okay, initial small scale testing worked, e.g. the file signed a few days ago: ..and the file I've just resigned manually: (both with libjcat-0.1.14-2.fc39.x86_64) -- mass resigning of anything signed in the last days is progressing now:
|
|
Okay, all firmwares have been resigned, and metadata regenerated, and so if you're affected by this can you please try |
|
Firmware is not found now - so no update available. fwupdmgr refresh --force
Updating lvfs
Downloading… [***************************************]
Successfully downloaded new metadata: 5 local devices supported
fwupdmgr update
Devices with no available firmware updates:
• ELAN0678:00 04F3:3195
• Integrated RGB Camera
• Prometheus IOTA Config
• SKHynix HFS001TEJ9X102N
• UEFI Device Firmware
• UEFI Device Firmware
• UEFI Device Firmware
• UEFI Device Firmware
• UEFI Device Firmware
• UEFI dbx
Devices with the latest available firmware version:
• Battery
• Embedded Controller
• Prometheus
• System Firmware
• TPMAs it can be seen here: https://fwupd.org/lvfs/devices/com.lenovo.ThinkPadR23ET.firmware |
|
Ahh, the ODM moved it out of stable this morning -- probably to stop reports like this -- I'll email the ODM and move it back to stable in the interim. It'll take ~30 mins to rebuild the stable metadata, then please try again. |
|
@xsuchy09 give it a go now perhaps? |
|
can confirm: fixed it for me, 0.1.49 got installed. Thank you @hughsie |
Thanks, it's ok now and looks like updated even it ends with https://github.com/fwupd/fwupd/wiki/LVFS-Triaged-Issue:-Failed-to-run-update-on-reboot |
|
I had the same firmware signature missing or not trusted error attempting to update to 0.1.49, however after This is T14 Gen 3 (AMD) on Ubuntu 23.10 with fwupd 1.9.5:
|
|
It's again missing - as you can see: https://fwupd.org/lvfs/devices/com.lenovo.ThinkPadR23ET.firmware |
|
@xsuchy09 the ODM pulled back that version due to another (not us!) firmware problem -- I think 0.1.50 is in progress now. |
|
I know - just for info for @vpavic ;) |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Describe the bug
Trying to update Lenovo ThinkPad T14 Gen 3 system firmware to 0.1.49 version: firmware signature missing or not trusted. Lenovo said that it is signed correctly.
edit: It should be this firmware: https://fwupd.org/lvfs/devices/com.lenovo.ThinkPadR23ET.firmware
Steps to Reproduce
fwupdmgr update(classic update procedure)
Expected behavior
Update firmware.
fwupd version information
Please note how you installed it (
apt,dnf,pacman, source, etc):aptpreinstalledConsole output - update
Console output - devices
Additional questions
The text was updated successfully, but these errors were encountered: