Verifying Shim SBAT Data Failed Error After KB5041585

Windows 11 August 2024 security update KB5041585 has brought many improvements and bug fixes, but some users reported that after installing this update, the error " Verify shim SBAT data failed " occurred, resulting in the failure to start the Linux system. This article will guide you through this problem.

Windows 11 update causes Linux dual boot failure – Verifying Shim SBAT data failed

On August 13, 2024, Microsoft released the security update KB5041585 for Windows 11 23H2 and 22H2. This update solves many problems including BitLocker recovery screen, CVE-2024-38143 error, etc. However, this update prevents Windows and Linux dual boot devices from booting Linux. When trying to load Linux, you will receive this error message: "Verification shim SBAT data failed: Security policy conflict. Critical error occurred: SBAT self-test failed: Security policy conflict."

Real case:

Recent Windows updates seem to cause the dual boot system to fail to start Grub, showing the message: "Verification of shim SBAT data failed: Security policy conflict". Is there any way to fix this problem?

Are you also experiencing this error? If not, read on to learn how to prevent this problem. If so, here are detailed instructions on how to resolve this issue.

Preparations before installing Windows 11 August update KB5041585

According to Microsoft's statement, the "Verification of Shim SBAT Data Failed" error occurred because the August update enabled the Secure Boot Advanced Target (SBAT) settings to block vulnerable boot managers. However, the dual boot system is not correctly identified and is directly blocked. If you have not installed this update, you can take the following as a precaution.

Step 1. Enter cmd in the Windows search box and click the Run as administrator option at the command prompt in the right panel.

Step 2. Enter the following command line and press Enter to execute:

reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecureBoot\SBAT /v OptOut /d 1 /t REG_DWORD

How to fix Linux dual boot failure caused by KB5041585 after installing the August 2024 security update

If you have installed the update, what can you do to resolve the "Verify shim SBAT data failed" error? You can choose to disable secure boot and prevent future SBAT updates. The specific steps are as follows:

Step 1. When the computer starts, press and hold a specific key (such as F1 , F2 , F12 , or Esc , depending on your computer manufacturer) to open the computer's BIOS menu.

Step 2. Find the Secure Boot settings in the BIOS menu and use the keyboard to disable it.

Step 3. Start your Linux system.

Step 4. Press the Ctrl Alt T keyboard shortcut to open the terminal. Then type the following command and press Enter :

sudo mokutil –set-sbat-policy delete

Step 5. Restart into Linux system, and then execute mokutil –list-sbat-revocations in the terminal.

Step 6. Visit the BIOS Settings menu again and enable Secure Boot.

Step 7. Open the terminal and execute this command: mokutil –sb-state .

Step 8. Start Windows and open a command prompt as an administrator.

Step 9. Type the following command line and press Enter :

reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecureBoot\SBAT /v OptOut /d 1 /t REG_DWORD

After performing the above, you can now boot up your Linux system without receiving the "Verification Shim SBAT Data Failed" error message.

Summarize

This article details information and solutions for the "Verification Shim SBAT Data Failed" error that appears after installing the Windows 11 August 2024 security update. I hope you can restore the dual boot function of Linux and Windows after performing the above steps.

The above is the detailed content of Verifying Shim SBAT Data Failed Error After KB5041585. For more information, please follow other related articles on the PHP Chinese website!