Package: shim-signed Severity: normal Dear Maintainer,
it looks like there is a 32 bit (i386) version of shim-signed missing, that is Microsoft-signed and able to boot UEFI 32bit version with enabled SecureBoot. i have a tablet/netbook, where Windows 10 (32bit) is preinstalled. that device has only a UEFI 32 bit. it has no UEFI 64 option and has no option for Legacy BIOS / CSM. but the device has a 64bit CPU. (i think the reason why there is an UEFI32 and Windows 10 32bit preinstalled on that device, is an licence/pricepoint thing) anyhow, when i try to boot Debian 9.5.0 amd64 or i386, the device will not boot, because of missing bootia32.efi on the Live DVD. on the Debian 9.5.0 multiarch i386_amd64 netinstall media, there is bootia32.efi file, but that is not Microsoft-signed and the boot process will stop because of wrong signature. to be able to boot Debian 9.5.0 Live DVD (64bit and 32bit version) on that device, an UEFI32 (i386/i686) shim (bootia32.efi) with proper Microsoft-signature is necessary, like the existinf UEFI64 (amd64) counterpart that is Microsoft-signed properly. -- System Information: Debian Release: 9.5 APT prefers stable APT policy: (500, 'stable') Architecture: i386 (i686) Kernel: Linux 4.9.0-7-686 (SMP w/8 CPU cores) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system)
