These are just version 4 (random) UUIDs to use as FMP GUIDs.
This change was generated with the following command:
find models/ -name edk2.config -exec bash -c 'echo -e "\n# FMP UUIDs for ESRT\nSYSTEM_FMP_UUID=$(uuidgen -r)\nEC_FMP_UUID=$(uuidgen -r)" >> {}' \;
And then staged for everything except QEMU.
Signed-off-by: Tim Crawford <tcrawford@system76.com>
This enables *support* for Secure Boot. It is not recommended to enable
Secure Boot. There is no firmware UI for managing the state or keys.
The system will default to disabled in Setup Mode:
$ mokutil --sb-state
SecureBoot disabled
Platform is in Setup Mode
This is sufficient to install Windows 11.
Signed-off-by: Tim Crawford <tcrawford@system76.com>