# Error: grub-mender-grubenv:do\_sign failed **URL:** \ **Category:** General Discussions\ **Tags:** yocto\ **Created:** [August 1, 2024, 11:04am UTC](https://hub.mender.io/t/error-grub-mender-grubenv-do-sign-failed/7061 "2024-08-01T11:04:45Z")\ **Posts on this page:** 1\ **Showing post:** 5
**Author:** ![annalenamarx](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/annalenamarx/32/2035_2.png) [@annalenamarx](https://hub.mender.io/u/annalenamarx)\ **Post date:** [August 12, 2024, 8:33am UTC](https://hub.mender.io/t/error-grub-mender-grubenv-do-sign-failed/7061/5 "2024-08-12T08:33:06Z")
Hi @adrian and @TheYoctoJester, I’m still not sure on your actual approach, but I think it went on a hard to solve track right from the beginning. May you can use [Mender and efi-secure-boot on intel-corei7-64 - #12 by esscrb](https://hub.mender.io/t/mender-and-efi-secure-boot-on-intel-corei7-64/4862/12) as an inspiration, this is where I oriented myself while implementing and added the parts missing for me to get it on the road. I think you mixed up several issues here, so it is hard to see where the root cause came in. I had to patch grub-mender-grubenv, too, but in another context - I needed to patch the grub entry in order to load the kernel from the correct, signed location - and could not remember issues with getting it signed (working on kirkstone branches). If it is not crucial for your use-case, I would suggest following the approach in the mentioned thread with no initramfs used, as I think Mender would also need some additional love for proper handling. And I would not try to change the MENDER\_BOOT\_PART\_MOUNT\_LOCATION, keep the Mender parts within the root partition and EFI seperated on boot. For updating the signed kernel are Mender state scripts a really good solution. I hope this helps. Secure Boot and meta-secure-core is not that well documented and you’re completely on your own with everything besides exactly that use-case the original authors had in mind. Best, Anna --- _[View the full topic](https://hub.mender.io/t/error-grub-mender-grubenv-do-sign-failed/7061)._