Secure Boot Enrollment

RakuOS ships a custom signing key that must be enrolled in your firmware the first time you boot after installation.

1
A blue screen will appear on first boot

After installation completes and your system reboots for the first time, the MOK Manager (Machine Owner Key) screen will appear before the OS loads. This is normal and expected.

2
Select Enroll MOK

Use the arrow keys to highlight Enroll MOK and press Enter. Then select Continue on the next screen.

3
Enter the enrollment password

When prompted for a password, type:

rakuos
4
Select Reboot

Once the key is enrolled, select Reboot. Your system will boot normally from this point forward with Secure Boot active.