diff options
| author | Tom Rini <trini@konsulko.com> | 2020-07-16 16:35:15 -0400 |
|---|---|---|
| committer | Tom Rini <trini@konsulko.com> | 2020-07-16 16:35:15 -0400 |
| commit | fee68b98fe3890631a9bdf8f8db328179011ee3f (patch) | |
| tree | 362a05bc5b23abe6183cfc153988351e329fb6da /doc/uefi/uefi.rst | |
| parent | 3b33eff3f263e6ccadf505e67d450970cc1c8e6c (diff) | |
| parent | c70f44817d466848c421ed7159bc9aba428e69ad (diff) | |
Merge tag 'efi-2020-10-rc1-4' of https://gitlab.denx.de/u-boot/custodians/u-boot-efi
Pull request for UEFI sub-system for efi-2020-10-rc1 (4)
Improvements for the UEFI subsystem include:
* support for read-only TEE-backed variables
* allow to compile PK, KEK, db, dbx fixed values into U-Boot
* bug fixes
Python testing related changes comprise:
* enable 'bootefi hello' for better test coverage
* remove SKIP messages in UEFI Python tests
The fitupd command is dropped.
Build errors for the lsblk command are fixed.
Diffstat (limited to 'doc/uefi/uefi.rst')
| -rw-r--r-- | doc/uefi/uefi.rst | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/doc/uefi/uefi.rst b/doc/uefi/uefi.rst index 03d6fd0c6a..a72e729cc8 100644 --- a/doc/uefi/uefi.rst +++ b/doc/uefi/uefi.rst @@ -188,6 +188,15 @@ on the sandbox cd <U-Boot source directory> pytest.py test/py/tests/test_efi_secboot/test_signed.py --bd sandbox +UEFI binaries may be signed by Microsoft using the following certificates: + +* KEK: Microsoft Corporation KEK CA 2011 + http://go.microsoft.com/fwlink/?LinkId=321185. +* db: Microsoft Windows Production PCA 2011 + http://go.microsoft.com/fwlink/p/?linkid=321192. +* db: Microsoft Corporation UEFI CA 2011 + http://go.microsoft.com/fwlink/p/?linkid=321194. + Using OP-TEE for EFI variables ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |