update-secureboot-policy command not found

In this troubleshooting guide we learn how to fix update-secureboot-policy command not found error message

Introduction

When you run more command in linux terminal / console, you get the following error message

update-secureboot-policy: command not found

or when using sudo you get the following error message

sudo: update-secureboot-policy: command not found

Solutions to update-secureboot-policy: command not found

How To Fix update-secureboot-policy: command not found in Ubuntu / Debian / Kali Linux / Raspbian

In Ubuntu update-secureboot-policy is provided by shim-signed package.

shim-signed is:

This package provides a minimalist boot loader which allows verifying signatures of other UEFI binaries against either the Secure Boot DB/DBX or against a built-in signature database. Its purpose is to allow a small, infrequently-changing binary to be signed by the UEFI CA, while allowing an OS distributor to revision their main bootloader independently of the CA.

This package contains the version of the bootloader binary signed by the Microsoft UEFI CA.

To fix this problem, we can install more using the command below.

sudo apt-get -y install shim-signed

This command might take some time to finish depending on your machine internet connection.

You can also use apt command to install shim-signed.

sudo apt -y install shim-signed

Or if you have aptitude installed you can use the following command.

sudo aptitude install shim-signed

Summary

In this tutorial we learn how to fix update-secureboot-policy command not found error in Ubuntu / Debian / Kali Linux or Raspbian distribution.