Secure Boot Enrollment
RakuOS ships a custom signing key that must be enrolled in your firmware the first time you boot after installation.
1
A blue screen will appear on first boot
After installation completes and your system reboots for the first time, the MOK Manager (Machine Owner Key) screen will appear before the OS loads. This is normal and expected.
2
Select Enroll MOK
Use the arrow keys to highlight Enroll MOK and press Enter. Then select Continue on the next screen.
3
Enter the enrollment password
When prompted for a password, type:
rakuos
4
Select Reboot
Once the key is enrolled, select Reboot. Your system will boot normally from this point forward with Secure Boot active.
Why is this needed?
RakuOS builds custom kernel modules that are signed with a RakuOS-specific key. Enrolling this key tells your firmware to trust those modules, which is required when Secure Boot is enabled.