CentOS 7 – Failed to set MokListRT: Invalid Parameter

CentOS 7, a bug related to the latest update was detected.

After updating CentOS 7, when rebooting, it gives the following error and the server shuts down.

Failed to set MokListRT: Invalid Parameter
Something as gone seriously wrong: import_mok_state() failed:
Invalid Parameter

Workaround #1 : on existing machine, before updating, be sure to exclude shim* and mokutil* (so that it can stay at version shim-x64-12-2.el7.x86_64

  • echo 'exclude=shim*,mokutil*' >> /etc/yum.conf
  • yum update

Workaround #2 : if you have already updated and also rebooted, you have to use a live media to

  • mount /boot/efi
  • cd /boot/efi/EFI/centos
  • cp grubx64.efi shimx64.efi
  • umount
  • reboot