eec38fd383
Must use RuntimeVariableDxe instead of EmuVariableDxe. Currently doesn't boot on qemu. Signed-off-by: Patrick Rudolph <patrick.rudolph@9elements.com>
9 lines
445 B
Plaintext
9 lines
445 B
Plaintext
# PK certificate generation
|
|
|
|
* Do not save private key for re-usage.
|
|
* Generate a RSA 2048 / SHA256 x509 certificate
|
|
* Exponent should be 65537
|
|
* Microsoft certificates can be found here: https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/windows-secure-boot-key-creation-and-management-guidance
|
|
|
|
openssl req -outform DER -newkey rsa:2048 -keyout /dev/null -passout file:<(head -c 40 /dev/urandom) -x509 -days 365 -out pk.crt
|