3 ms·
I'm not sure why this would be the case. Secret keys never leave security processors or data drives. The BIOS does very little here.
by willis936 3y ago
I'm not sure why this would be the case. Secret keys never leave security processors or data drives. The BIOS does very little here.
- zokier 3y agoFrom firmware config you can potentially enroll new keys, or just disable sb completely, both which enable injecting malicious code in the boot chain
- willis936 3y agoWhen changing security processors the secure boot drive requires the entry of the secret key again. If a user enters the secret key on a compromised system then the game would be up. You would need to wait until the user decided to change the security processor to intercept quietly.