mokutil --list-enrolled reports: This system does't support Secure Boot

This document (000020387) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Linux Enterprise Server 15

Situation

mokutils reports the system doesn't support secure boot, even though it does:

# mokutil --list-enrolled
This system does't support Secure Boot

Resolution

Remounting the efivarfs filesystem makes the problem go away until the next reboot.
The command is:

mount -o remount -t efivarfs efivarfs /sys/firmware/efi/efivars

However, the problem in this particular case was McAfee antivirus software(and its kernel modules)
interfering with efivarfs module.
Stopping and disabling McAfee and reboot resolves the problem.
In general, if you experience such behavior, verify that no third party software/kernel modules are loaded
and report this defect to the third party software vendor.

Cause

Antivirus software interferes with efivarfs kernel module.

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.