4 ms·
> Case in point: TPM is not required to implement UEFI Secure Boot. You can test yourself in a QEMU VM, if you don’t believe me. I believe you, but doesn't tha
by yosamino 4y ago
> Case in point: TPM is not required to implement UEFI Secure Boot. You can test yourself in a QEMU VM, if you don’t believe me.
I believe you, but doesn't that mean that there is nothing particular secure about this operation ?
But thank you for the correction, I was under the impression that secure boot neccessarily needs a TPM to store it's keys.
- josteink 4y ago> but doesn't that mean that there is nothing particular secure about this operation ? Not at all. The trusted signing-certificates don’t need to be stored securely since they only contain public keys. This is typically stored in NVRAM or EFI-variables.