Issues

• Ubuntu Installer - Hardware-Backed Encryption is unavailable even though fTPM/PTT are fully functional and available.

  canonical/secboot#575 · Filter by author matthewdaluz opened on Sep 27, 2026

• unit test TestFormatWithInlineCryptoEngine failing

  canonical/secboot#573 · Filter by author frederic-hoerni opened on Sep 18, 2026

• efi/preinstall: CSME18+ manufacturing-mode check fires on fused Lenovo platforms (HFSTS6 bit 21 clear with Flexible EOM); fwupd removed the same test

  canonical/secboot#572 · Filter by author pdietl opened on Sep 15, 2026
  3

• WithDriversAndAppsProfile misses vendor event extended to PCR 2 after EV_SEPARATOR

  canonical/secboot#570 · Filter by author pkit opened on Sep 9, 2026
  7

• PCR7 profile expects a db EV_EFI_VARIABLE_AUTHORITY measurement that some firmware never performs, making TPM unlock impossible

  canonical/secboot#558 · Filter by author 2atbas opened on Aug 9, 2026
  4

• PCR_UNUSABLE after already seeing a verification event during the OS-present environment

  canonical/secboot#557 · Filter by author jw-rav opened on Jul 27, 2026
  2

• Error: PCR_UNUSABLE

  canonical/secboot#550 · Filter by author RADIK001 opened on Jun 6, 2026
  2

• Ubuntu 26.04 installation failed in hardware-backed FDE mode on ThinkPad T14s Gen 5 Intel

  canonical/secboot#549 · Filter by author huypn12 opened on May 30, 2026
  7

• SHA-1 TPMs not supported with 26.04

  canonical/secboot#547 · Filter by author CYB3RCA4T opened on May 16, 2026
  6

• Unable to enable TPM FDE in installer - Ubuntu 26.04 LTS

  canonical/secboot#543 · Filter by author jnsgruk opened on Apr 29, 2026
  7

• TPM backed encryption on Dell Precision 5490 results in asking for Recovery Key endlessly.

  canonical/secboot#542 · Filter by author Alslinet opened on Apr 28, 2026
  6

• Ubuntu 26.04 Cannot Use Hyper-V TPM 2.0

  canonical/secboot#541 · Filter by author darienhawkins opened on Apr 27, 2026
  1

• Ubuntu 26.04 - Hardware-backed encryption could not be enabled

  canonical/secboot#540 · Filter by author jegly opened on Apr 26, 2026

• Check secure boot config measurements against current variable contents

  preinstall-checks
  canonical/secboot#538 · Filter by author chrisccoulson opened on Apr 14, 2026

• Test that no OS-present events appear in PCRs 0, 1, 2, and 3

  preinstall-checks
  canonical/secboot#537 · Filter by author chrisccoulson opened on Apr 14, 2026
  1

• Recovery key is required after TPM/FDE installation

  canonical/secboot#522 · Filter by author nancyc12 opened on Mar 4, 2026

• Don't present ErrorKindAddonDriversPresent for option ROMs loaded from integrated PCI devices.

  preinstall-checks
  canonical/secboot#516 · Filter by author chrisccoulson opened on Mar 2, 2026

• Suppress ErrorKindNoKernelIOMMU errors on systems with no external facing PCI ports

  preinstall-checks
  canonical/secboot#513 · Filter by author chrisccoulson opened on Mar 2, 2026
  1

• Multiple similar options given to reset the tpm

  canonical/secboot#503 · Filter by author zyga opened on Feb 6, 2026

• Platform Secure Boot is not enabled is wrong for AMD systems

  canonical/secboot#501 · Filter by author superm1 opened on Feb 4, 2026
  3

  

• preinstall: ErrKindTPMDeviceLockoutLocked out should be associated with ActionReboot in some circumstances

  preinstall-checks
  canonical/secboot#459 · Filter by author chrisccoulson opened on Sep 17, 2025

• preinstall: Add PPI action to reconfigure PCR banks

  preinstall-checks
  canonical/secboot#457 · Filter by author chrisccoulson opened on Sep 10, 2025

• Unable to encrypt due to PCR4 measurement error

  canonical/secboot#456 · Filter by author jamesps-ebi opened on Aug 28, 2025
  1

• Cannot check TPM discreteness using Intel BootGuard status: no TPM2 device is available

  canonical/secboot#455 · Filter by author neurer opened on Aug 8, 2025
  12

• efi/preinstall: Check that TPM's platform hierarchy is disabled or has an authorization value

  preinstall-checks
  canonical/secboot#452 · Filter by author chrisccoulson opened on Jul 22, 2025