Secure Boot error while installing Endpoint Protection for Linux

Products

• Endpoint Protection

Issue/Introduction

While attempting to load AutoProtect, you receive errors on your Linux system.

 

insmod: ERROR: could not insert module /opt/Symantec/autoprotect/.symevrm-custom-3.10.0-693.2.2.el7-x86_64.ko: Required key not available
insmod: ERROR: could not insert module /opt/Symantec/autoprotect/.symevrm-rh-ES-7-3.10.0-693.el7-x86_64.ko: Required key not available
insmod: ERROR: could not insert module /opt/Symantec/autoprotect/.symevrm-rh-ES-7-3.10.0-514.el7-x86_64.ko: Required key not available

Cause

SEP for Linux (SEPFL) depends upon manually compiling AutoProtect kernel modules for AutoProtect to function. As these modules are manually compiled, they are not signed and are not compatible with Secure Boot functionality on Linux computers.
 

Resolution

14.3 RU3 and above are able to work with Secure Boot.  For these versions follow the steps in Configure a secure boot system with Symantec DCS or SEP Linux products.

14.3 RU2 and below, restart the computer and disable Secure Boot. AutoProtect will now function correctly.