sravan/system76-edk2
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

UefiPayloadPkg: Add Secure Boot support

Browse Source 
Cc: Guo Dong <guo.dong@intel.com>
Cc: Ray Ni <ray.ni@intel.com>
Cc: Maurice Ma <maurice.ma@intel.com>
Cc: Benjamin You <benjamin.you@intel.com>
Signed-off-by: Sean Rhodes <sean@starlabs.systems>
Change-Id: I4f44e29bc967b7d2208193e21aeeef8b96afcc69
This commit is contained in:
Sean Rhodes
2022-01-03 15:56:05 +00:00
committed by Tim Crawford
parent 35dde2452d
commit 2dc1e51593
14 changed files with 674 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

BIN
UefiVariableBinary/keys/MicCorKEKCA2011_2011-06-24.crt Normal file
View File

Binary file not shown.

BIN
UefiVariableBinary/keys/MicWinProPCA2011_2011-10-19.crt Normal file
View File

Binary file not shown.

8
UefiVariableBinary/keys/README Normal file
View File

@@ -0,0 +1,8 @@
# PK certificate generation
* Do not save private key for re-usage.
* Generate a RSA 2048 / SHA256 x509 certificate
* Exponent should be 65537
* Microsoft certificates can be found here: https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/windows-secure-boot-key-creation-and-management-guidance
openssl req -outform DER -newkey rsa:2048 -keyout /dev/null -passout file:<(head -c 40 /dev/urandom) -x509 -days 365 -out pk.crt

BIN
UefiVariableBinary/keys/dbxupdate_x64.bin Normal file
View File

Binary file not shown.

BIN
UefiVariableBinary/keys/pk.crt Normal file
View File

Binary file not shown.