The error: integrity: Problem loading X.509 certificate -65 usually appears during booting in Linux Mint 19 and 20. It might prevent you from login and using your Linux Mint installation. The error might occur for dual boot systems.

Some versions of this error:

[    1.218950] Problem loading UEFI: db X.509 certificate (-65)

or

[    2.163272] integrity: Problem loading X.509 certificate -65

or

[    1.288840] Initramfs unpacking failed: Decoding failed
[    1.577544] integrity: Problem loading  X.509 certificate -65

In this article we will cover several different reasons and possible solutions. The same error might appear on fresh installations or working stations.

If you are able to login and use your Linux Mint installation and there's no issues with speed or crashes then you can simply ignore the error.

Step 1: Check the SHA256SUM of the ISO

If the error is shown for new installation then the ISO might be verified for correction.

The steps to verify your ISO can be found on the link.

In case of corrupted copy or not properly downloaded errors like the one above might occur.

Note: Even if the validation is successful you can check the USB disk integrity.

This can be done by:

  • bott from USB with Linux Mint
  • Check Media Integrity selection from the boot menu
  • In case of errors you need to get new USB or retry the ISO writing

A USB with error was causing:

[ 2.163272] integrity: Problem loading X.509 certificate -65

which was failing the login after few weeks usage.

Step 2: Check the HDD or SSD for errors

Another reason for error - integrity: Problem loading X.509 certificate -65 might be a bad disk. This can happen for new or existing installations.

To verify that your disk works properly you can use next commands:

sudo fdisk -l

after entering your root pass you will see something like:

Device Boot Start End Sectors Size Id Type
/dev/sda1 * 2048 43948031 43945984 21G 83 Linux

Identify the /dev/sdXX device name for your "Linux Mint" installation.
Then check the disk for badblocks:

sudo badblocks -sv /dev/sda

If there are no bad block you will see:

sudo badblocks -sv /dev/sda
Checking blocks 0 to 22020095
Checking for bad blocks (read-only test): done                                                 
Pass completed, 0 bad blocks found. (0/0/0 errors)

Note: that this process might take time for bigger disks!

and finally try to repair the disk by:

sudo fsck /dev/sda1

If you get errors try to backup your information and go for a new disk.

Step 3: Fix Linux Mint Integrity problem by "Disable the Secure Boot"

The first solution is to disable the Secure Boot of your laptop or PC. The steps will depends on your model but in general they will be:

  • Restart
  • Enter in BIOS (press F10, F2,F8, del or the one for your machine)
  • Find Secure Boot option
    • Troubleshoot
    • Advanced Options: UEFI Firmware Settings
  • Disable the Secure Boot
  • Press Reset Setup Mode or Reset to Setup Mode - depends on your bios
  • Save changes and exit. The PC restarts

Here you can find a link for Lenovo BIOS simulator and test how the Secure Boot can be disabled.

After the restart the error should disappear.

Note: Some laptops don't have the Secure Boot option or need to be displayed from advanced settings.

Step 4: Fix Initramfs unpacking failed

These errors are two different once:

[    1.288840] Initramfs unpacking failed: Decoding failed
[    1.577544] integrity: Problem loading  X.509 certificate -65

To fix the first one you can check this article: Boot error concerning the unpacking of initramfs

Step 5: Boot with older kernels or version

The final solution is to use Linux Mint Recovery mode and Advanced Boot Options.

To do so you can follow the complete instructions in this article: Linux Mint Recovery Mode or Advanced Boot Options

A shortened version:

  • Start the PC
  • Wait the UEFI/BIOS to load
  • Keep and Hold - Shift
  • Wait for GNU GRUB menu (Advanced Options For Linux Mint 20 Cinnamon)
  • Select older version and test the boot