secureboot_objects

Secure boot objects recommended by Microsoft.

OTHER License

Stars
30
Committers
7

Bot releases are visible (Hide)

secureboot_objects - v1.1.3 Latest Release

Published by github-actions[bot] 3 months ago

What's Changed

Please review the localized readme file and the contents of each folder.

  </blockquote>
  <hr>
</details>
  1. keystore.toml was renamed to FirmwareDefaults.toml
  2. Created two new folders PreSignedObjects, and PostSignedObjects
    • PreSignedObjects now represents Objects that may exist in your Secure Boot Configuration
    • PostSignedObjects now represents Signed Objects from Microsoft that will map to the PreSignedObjects
  3. All Existing Objects were moved

This should not be a breaking change. However Breaking changes are likely to come in follow up commits.


Full Changelog: https://github.com/microsoft/secureboot_objects/compare/v1.1.2...v1.1.3

secureboot_objects - v1.1.2

Published by github-actions[bot] 6 months ago

What's Changed

This change allows a user to change the signature_owner per entry such as if a user of this script wishes to add their own certificate.
For example a user may now add their own custom certificate and specify their own guid:

############################
# Default Kek File Entries #
############################
[DefaultKek]
help = "Contains the Microsoft KEKs to enable signature database updates and binary execution."

[[DefaultKek.files]]
path = "keystore/Kek/MicCorKEKCA2011_2011-06-24.der"
url = "https://go.microsoft.com/fwlink/?LinkId=321185"
sha1 = 0x31590bfd89c9d74ed087dfac66334b3931254b30
signature_owner = "77fa9abd-0359-4d32-bd60-28f4e78f784b"

[[DefaultKek.files]]
path = "keystore/Kek/microsoft corporation kek 2k ca 2023.der"
url = "https://go.microsoft.com/fwlink/?linkid=2239775"
sha1 = 0x459ab6fb5e284d272d5e3e6abc8ed663829d632b
signature_owner = "77fa9abd-0359-4d32-bd60-28f4e78f784b"

[[DefaultKek.files]]
path = "keystore/Kek/my_custom_kek_certificate.der"
sha1 = 0xadd9ea3b9077aab54e55ef51ddb65c9a35db81ac
signature_owner = "12345678-ABCD-EF01-2345-6789ABCDEF01"
  </blockquote>
  <hr>
</details>

🐛 Bug Fixes

Updates the link to use new location in Mu Plus instead of the old
location in Mu OEM Sample.


Full Changelog: https://github.com/microsoft/secureboot_objects/compare/v1.1.1...v1.1.2

secureboot_objects - v1.1.1

Published by Javagedes 11 months ago

What's Changed

Dependency Updates

New Contributors

Full Changelog: https://github.com/microsoft/secureboot_objects/compare/v1.1.0...v1.1.1

secureboot_objects - v1.1.0

Published by Flickdm 12 months ago

What's Changed

New Contributors

Full Changelog: https://github.com/microsoft/secureboot_objects/commits/v1.1.0

Related Projects