MdeModulePkg/Library/UefiBootManagerLib: Be more verbose about boot f…

…ailure Signed-off-by: Michał Żygowski <[email protected]>
Dasharo · Oct 24, 2023 · 2248bad · 2248bad
1 parent 4067882
commit 2248bad
Showing 1 changed file with 10 additions and 2 deletions.
diff --git a/MdeModulePkg/Library/UefiBootManagerLib/BmBoot.c b/MdeModulePkg/Library/UefiBootManagerLib/BmBoot.c
@@ -1927,9 +1927,17 @@ EfiBootManagerBoot (
         SecureBoot = NULL;
         GetEfiGlobalVariable2 (EFI_SECURE_BOOT_MODE_NAME, (VOID**)&SecureBoot, NULL);
         if ((SecureBoot != NULL) && (*SecureBoot == SECURE_BOOT_MODE_ENABLE)) {
-          AsciiPrint ("SecureBoot is enabled.\n");
+          AsciiPrint ("Secure Boot is enabled.\n");
         } else {
-          AsciiPrint ("SecureBoot is disabled.\n");
+          AsciiPrint ("Secure Boot is disabled.\n");
+        }
+
+        if ((BootOption->Status == EFI_ACCESS_DENIED) &&
+            (SecureBoot != NULL) &&
+            (*SecureBoot == SECURE_BOOT_MODE_ENABLE)) {
+          AsciiPrint (
+              "The image signature is invalid or missing!\n"
+              "Sign the image with a valid key or disable Secure Boot\n");
         }
 
         if (SecureBoot != NULL) {