UEFI Secure Boot
A message that is not in the archive (sent off-list or not yet received): [email protected]
[added mailing list cc's since this is probably going to be a common question]
Quoted 10 lines · Finnbarr P. Murphy
Hi James,
Nice work on your UEFI Secure Boot demo code!
Have you experimented with either of the following scenarios?
- Removing current PK via a utility
- Replacing current PK with a new PK via a utilityassuming you know existing PK keys.
Not yet ... I'm still working on writing the code that constructs the time based authentication bundle for the variables. When I have it, it will appear in my git repository (and I'll probably send a note to the linux-efi list):
http://git.kernel.org/?p=linux/kernel/git/jejb/efitools.git;a=summary
Quoted 4 lines
From Chapter 27 of the UEFI Specification, this should be possible but
I cannot get either scenarios to work (due to error 26 - Security
Violation) Perhaps it is the OVMF implementation (latest from trunk)
but I suspect it is just my old age!
Constructing time based authentication bundles is complex ... are you sure you have the code right? error 26 means the platform doesn't think the authentication is correct.
James
���{.n�+�������+%�����ݶ��w��{.n�+����{��G�����{ay� ʇڙ�,j��f���h��������z_�(�階�ݢj"���m������G������?����&���~��iO��z��v�^�m���� ������?�I�