Files
Michał Żygowski 9da88d69f0 Move modules from UefiPayloadPkg
Signed-off-by: Michał Żygowski <michal.zygowski@3mdeb.com>
2023-12-05 11:55:22 +01:00

10 lines
604 B
Plaintext

# PK certificate generation
* Do not save private key for re-usage.
* Generate a RSA 2048 x509 certificate
* Exponent should be 65537
* Microsoft certificates can be found here: https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/windows-secure-boot-key-creation-and-management-guidance
* Date of downloading Microsoft certificates and DBX: 16-11-2023
openssl req -outform DER -newkey rsa:2048 -keyout /dev/null -passout file:<(head -c 40 /dev/urandom) -x509 -days 1825 -out pk.crt -subj "/C=PL/ST=Pomerania/L=Gdansk/O=3mdeb Sp. z o.o./CN=Dasharo PK/emailAddress=contact@dasharo.com"