OVMF PK, KEK and DB Keys Enrolling
Project description
A tool to enroll secure boot keys in OVMF_VARS.fd
Build & Install
python3 -m pip install --upgrade build
python3 -m build
python3 -m pip install dist/ovmfkeyenroll-*.whl
Usage
You can copy OVMF_VAR.fd to current path.
This is to enroll PK, KEK and DB keys and generate OVMF_VAR.sb.fd:
ovmfkeyenroll -fd $PWD/OVMF_VARS.fd \
-pk <pk-key-guid> <absolute-path-to-PK.cer> \
-kek <kek-guid> <absolute-path-to-KEK.cer> \
-db <db-key-guid> <absolute-path-to-DB.cer>
The keys have been successfully enrolled:
VariableFV: TimeBasedAuthenticated - Supported
Var Store: add PK - Success
Write Variable(PK) - Success
Enroll PK variable -- Success
VariableFV: TimeBasedAuthenticated - Supported
Var Store: add KEK - Success
Write Variable(KEK) - Success
Enroll KEK variable -- Success
VariableFV: TimeBasedAuthenticated - Supported
Var Store: add db - Success
Write Variable(db) - Success
Enroll db variable -- Success
VariableFV: TimeBasedAuthenticated - Supported
Var Store: add SecureBootEnable - Success
Write Variable(SecureBootEnable) - Success
Enroll SecureBootEnable variable -- Success
Project details
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
ovmfkeyenroll-1.1.0.tar.gz
(16.1 kB
view hashes)
Built Distribution
Close
Hashes for ovmfkeyenroll-1.1.0-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | 98da1dd664e1c77dffd12d312b7f6eaa654b662dcd8a3a9febcc4a53f58f65ac |
|
MD5 | 33823d18ac7bf5fe979ab22a0f559e1b |
|
BLAKE2b-256 | ca54a207f2c17345b3641e0f2cbb5e6db06139916fbb74c6e9c86db58aa181b4 |