Microsoft certificates in DB and KEK must have the Signature Owner
GUID set to 77fa9abd-0359-4d32-bd60-28f4e78f784b in the signature
list structure. By default EDK2 used gEfiGlobalVariableGuid as
signature owner.
For reference see Windows Secure Boot Key Creation and Management
Guidance on https://learn.microsoft.com/
Signed-off-by: Michał Żygowski <michal.zygowski@3mdeb.com>
The dbx file from uefi.org page is the complete variable value with
a time payload already incorporated. The BIOS is supposed to call the
SerVariable with the buffer pointing to the dbx file content:
https://uefi.org/revocationlistfile
Signed-off-by: Michał Żygowski <michal.zygowski@3mdeb.com>
Signed-off-by: Sergii Dmytruk <sergii.dmytruk@3mdeb.com>
Improve the formatting of the error message when GetVariable
fails: start the message with an upper-case character, and close the
quotes around the variable name.
Signed-off-by: Rebecca Cran <rebecca@bsdio.com>
__FUNCTION__ is a pre-standard extension that gcc and Visual C++ among
others support, while __func__ was standardized in C99.
Since it's more standard, replace __FUNCTION__ with __func__ throughout
SecurityPkg.
Signed-off-by: Rebecca Cran <rebecca@bsdio.com>
Reviewed-by: Michael D Kinney <michael.d.kinney@intel.com>
Reviewed-by: Ard Biesheuvel <ardb@kernel.org>
This commits add library, which consist functions to
enrolll Secure Boot keys and initialize Secure Boot
default variables. Some of the functions was moved
from SecureBootConfigImpl.c file.
Signed-off-by: Grzegorz Bernacki <gjb@semihalf.com>
Reviewed-by: Sunny Wang <sunny.wang@arm.com>
Reviewed-by: Jiewen Yao <Jiewen.yao@intel.com>
Michał Żygowski
Michael D Kinney
Michael Kubacki
Rebecca Cran
Kun Qin
Grzegorz Bernacki