OVMF PK, KEK and DB Keys Enrolling
Project description
A tool to enroll secure boot keys in OVMF_VARS.fd
Build & Install
python3 -m pip install --upgrade build
python3 -m build
python3 -m pip install dist/ovmfkeyenroll-*.whl
Usage
You can copy OVMF_VAR.fd to current path.
This is to enroll PK, KEK and DB keys and generate OVMF_VAR.sb.fd:
ovmfkeyenroll -fd $PWD/OVMF_VARS.fd \
-pk <pk-key-guid> <absolute-path-to-PK.cer> \
-kek <kek-guid> <absolute-path-to-KEK.cer> \
-db <db-key-guid> <absolute-path-to-DB.cer>
The keys have been successfully enrolled:
VariableFV: TimeBasedAuthenticated - Supported
Var Store: add PK - Success
Write Variable(PK) - Success
Enroll PK variable -- Success
VariableFV: TimeBasedAuthenticated - Supported
Var Store: add KEK - Success
Write Variable(KEK) - Success
Enroll KEK variable -- Success
VariableFV: TimeBasedAuthenticated - Supported
Var Store: add db - Success
Write Variable(db) - Success
Enroll db variable -- Success
VariableFV: TimeBasedAuthenticated - Supported
Var Store: add SecureBootEnable - Success
Write Variable(SecureBootEnable) - Success
Enroll SecureBootEnable variable -- Success
Project details
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
ovmfkeyenroll-1.0.9.tar.gz
(16.1 kB
view hashes)
Built Distribution
Close
Hashes for ovmfkeyenroll-1.0.9-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | 4303aead1f90172d779c3f5e6c65469e7050e9142e75f3250d2d80c89aed53ee |
|
MD5 | 654101194276af22de673a0a66a0035c |
|
BLAKE2b-256 | 8bb275101b3cebfbad16881be080fba19843de63638a7a41ee5d9e214665c264 |