Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

dasharo-menu-docs/device-manager.md: update to include MS 2023 SB certs #732

Merged
merged 1 commit into from
Jan 2, 2024
Merged

dasharo-menu-docs/device-manager.md: update to include MS 2023 SB certs #732

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 4 additions & 1 deletion docs/dasharo-menu-docs/device-manager.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -107,11 +107,14 @@ which will cause the `Advanced Secure Boot Keys Management` submenu to appear.

* `Reset to default Secure Boot Keys` will cause the following keys/certificates
to be enrolled:
- [Microsoft KEK certificate](https://go.microsoft.com/fwlink/?LinkId=321185),
- [Microsoft Corporation KEK CA 2011](https://go.microsoft.com/fwlink/?LinkId=321185),
- [Microsoft Corporation KEK 2K CA 2023](https://go.microsoft.com/fwlink/p/?linkid=2239775),
- Microsoft Signature Database (db) consisting of:
+ [Microsoft Windows Production PCA 2011](https://go.microsoft.com/fwlink/p/?linkid=321192)
and [Windows UEFI CA 2023](https://go.microsoft.com/fwlink/p/?linkid=2239776)
to allow Windows OS Loader to load,
+ [Microsoft Corporation UEFI CA 2011](https://go.microsoft.com/fwlink/p/?linkid=321194)
and [Microsoft UEFI CA 2023](https://go.microsoft.com/fwlink/?linkid=2239872)
to load OEM-approved UEFI drivers and applications (e.g. [shim](https://github.com/rhboot/shim)),
- Microsoft Forbidden Signature Database (dbx) published as
[UEFI Revocation List File on uefi.org](https://www.uefi.org/revocationlistfile),
Expand Down