4 ms·
"The shim is signed with the aforementioned Microsoft key, that is built into all PCs/laptops." this is a non-starter for me. the sheer number of microsoft pr
by nimbius 5y ago
"The shim is signed with the aforementioned Microsoft key, that is built into all PCs/laptops."
this is a non-starter for me. the sheer number of microsoft products and programs dedicated to or endorsing a backdoor for third parties makes it untenable for any security purpose.
- selfhoster11 5y agoStrip the signature and sign with your own key? It's possible as a part of the Secure Boot model.
- stragies 5y agoThat ^^ feels like an important part of the HowTo. Is there one, that includes this step already?
- selfhoster11 5y agoI imagine that this is a documented generic process that works for all UEFI boot binaries. I can't point to any specific guide because I don't use UEFI in Secure Boot mode.