Re: signing custom kernel for secure boot
[email protected] Tue, 4 Apr 2017 14:46:03 +0200
| Newsgroups | gmane.linux.suse.security |
|---|---|
| Message-ID | <[email protected]> |
On Fri, Mar 31, 2017 at 01:12:34AM +0200, Malte Gell wrote: > Oh, is MokManager able to enroll new PK and KEK keys? AFAIK not. This is something that should only be able in the BIOS > That would be awesome, some mainboards have no EFI GUI for doing that > and my Asrock only has a broken test PK..... :-( Did you check if you can fix this by updating you BIOS? Johannes -- GPG Key E7C81FA0 EE16 6BCE AD56 E034 BFB3 3ADD 7BF7 29D5 E7C8 1FA0 Subkey fingerprint: 250F 43F5 F7CE 6F1E 9C59 4F95 BC27 DD9D 2CC4 FD66 SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton HRB 21284 (AG Nürnberg)
signature.asc
(application/pgp-signature, 801 B)
-----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJY45WLAAoJELwn3Z0sxP1mUX0P/jvlo9FF+sTazzg/W/ehm/zo +ZtES3+xOxBhI9+uUOfF0MG2C6TXKJ1gVTRVXTm1DjPfWstORzORFSwn3GABXpkL xNno+HOy59bcnwBubs37s96iy3URb7qwdKeu2Z4Z4vdnt6heKcBd8k81k6ehdUZ/ KVJ5pUP7NNwz9AF5/WcdQy9Ksf90b+5ZYKWQcwGNyB/qZ6r0v8zMSQxzX0dJWLgO ejBeOdFq8Bqbl6RRultgIi1EbFKNL8A+AJqM53hMN2vhzTVTu8T3V8plSqWTV7Ep PlEWQpJY25gMshPY/JBuutcUb7I+Xo0chk4RLoxkoR6bGzo/VFqcolcHmiYl/0tv r0UqQ12vOlDAaTGtvb4fXyET9VVtDl8hu8tBMuzSt16YviQrZy+aCKPuie4fbLdo rJe4tJkfNGMBNSNR/NtE9DqCyDyUNcLfno/wmZ4aCYP1O/UDAnBO+3+lxtb/rXyq +rLe5dkJEzT1WV/6LO+mIuvZ2dQsTcuPCEwXKLwgFoOF6FCQeAxU1xXd/UdEGJKA gogxGeirBlBn2MtTMzq5doSDE+I0N/RrYwMJ840NUM/YV4+OrYNvx3367HlzGggb 7UgsY/g0Z57htcBQ+/n5LIRaqlioYD7uMTUIFl34JxnrWooZQOw3Ua25CkJpk/iU A2DKHrZqqMfntgpeJdSl =NWVS -----END PGP SIGNATURE-----