4 ms·
> There isn’t a standard PCR with some standard value indicating that a certain image was booted. No, but there is a standard PCR with a standard value indicat
by mjg59 4y ago
> There isn’t a standard PCR with some standard value indicating that a certain image was booted.
No, but there is a standard PCR with a standard value indicating that a certain certificate was used to sign what was booted, and Windows is signed with its own certificate rather than the third party UEFI CA one.
- amluto 4y agoNice, so MS gets better TPM-based assurance than anyone else.