Ubuntu – Upgrade from 16.04 to 18.04 failed

16.0418.04upgrade

A notification came up:

Cannot upgrade secure boot enforcement policy due to unsigned kernels
Your system has UEFI secure boot enabled firmware, and the following kernels present on your system are unsigned:
4.4.0-134-generic
The kernels cannot be verified under secure boot. To ensure your system remains bootable, GRUB will not be upgraded on your disk until these kernels are removed or replaced with signed kernels.

and the upgrade has stopped. Can someone please tell me what to do?

Best Answer

You could turn off secure boot in your BIOS/UEFI Settings and let the unsigned packages upgrade, or install the linux-signed-generic, shim-signed, grub-efi-amd64-signed, and fwupdate-signed on your 16.04 system and upgrade with secure boot.


The upgrade should work if you turn off secure boot and try again. To install the packages, start a terminal (Ctrl + Alt + t ) and type:

sudo apt-get install  linux-signed-generic shim-signed grub-efi-amd64-signed fwupdate-signed