Deleting dbx is not advisable, it contains the list of revoked certificates and binaries. The Mok* ones should be repopulated by shim during boot, so are probably fine. You want to end up with the same variables being back again after boot, essentially; but trigger garbage collection in UEFI during the reboot.
Deleting dbx is not advisable, it contains the list of revoked certificates and binaries. The Mok* ones should be repopulated by shim during boot, so are probably fine. You want to end up with the same variables being back again after boot, essentially; but trigger garbage collection in UEFI during the reboot.