I bought a NitroPad to use with Qubes. I am having nothing but trouble with it.
I want to stop using Nitrokey, but can’t find a way to remove it from the system when reinstalling Qubes.
I tried OEM Factory Reset / Re-Ownership, but just end up going around and around in circles.
Hope someone can help please?!
As far as I know it uses Heads firmware
which is a so-called custom “payload” (additional element) of a coreboot firmware.
It is technically possible to flash another firmware (including coreboot with some elements just to boot your system) but it is probably not worth the hassle unless you really know the internals.
What I would do is just to sign the Qubes installation again after the update and forget about that Heads thing completely.
@saper Thank you very much for your reply. Much appreciated. It looks as if I have some searching to do, as I don’t know how to “sign the Qubes installation”, but I am grateful that you have put me on a path to a solution!
I am sorry if my answer is unhelpful, I do not use Nitrokey and QubesOS this way.
When booting in the “Heads Boot Menu” there are Options → “Update checksums and sign all files in /boot”.
You need your key inserted to do that.
After this it should boot normally.
The procedure is documented here
You can enable the “basic mode” from the configuration settings (in Heads option menu).
Once this is done save this config to the firmware and then Heads will not verify the tampering anymore and you will not need to plug your Nitrokey to your computer and it will automatically boot on your OS.
