edk2-platforms icon indicating copy to clipboard operation
edk2-platforms copied to clipboard

Ampere/JadePkg: Add secure boot default keys initialization

Open bcran opened this issue 8 months ago • 0 comments

This allows to initialize secure boot with the default factory keys embedded in firmware flash image.

For example, to incorporate PK, KEK, and DB default keys, specify the corresponding key files in the Jade.dsc as follows:

DEFINE DEFAULT_KEYS = TRUE DEFINE PK_DEFAULT_FILE = path/to/PK.crt DEFINE KEK_DEFAULT_FILE1 = path/to/KEK.crt DEFINE DB_DEFAULT_FILE1 = path/to/DB1.crt DEFINE DB_DEFAULT_FILE2 = path/to/DB2.crt

Signed-off-by: Nhi Pham [email protected] Reviewed-by: Rebecca Cran [email protected]

bcran avatar Jun 05 '24 23:06 bcran