LWN.net Logo

Garrett: Why UEFI secure boot is difficult for Linux

Garrett: Why UEFI secure boot is difficult for Linux

Posted Jan 19, 2012 3:12 UTC (Thu) by mjg59 (subscriber, #23239)
In reply to: Garrett: Why UEFI secure boot is difficult for Linux by laptop006
Parent article: Garrett: Why UEFI secure boot is difficult for Linux

Keys can be added to the whitelist or the blacklist by updating the DB or DBX variables. Doing that requires that the update be signed by a valid KEK. Windows 8 logo machines will have a Microsoft key in KEK, so Windows Update can certainly add keys to either.


(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds