Normal for a heads boot mismatch after updating dom0?

User Support
1

OK so I have a new setup with heads, is it normal to get a boot hash mismatch immediately after restarting with an updated dom0?

16239317196473791070777767692333
162393171964737910707777676923332312×1734 1.18 MB

2

If there is a new kernel or Xen update, yes those files will change.

1 Like
3

you must check if the modified files correspond to the update (I think they do) and use the usb security dongle to re-sign /boot
All this is intended (and that is precisely one of the security the system offers)

4

See also this:

If you use Anti Evil Maid, you will need to reseal your secret
passphrase to new PCR values, as PCR18+19 will change due to the new
Xen binaries.