3 ms·
From firmware config you can potentially enroll new keys, or just disable sb completely, both which enable injecting malicious code in the boot chain
by zokier 3y ago
From firmware config you can potentially enroll new keys, or just disable sb completely, both which enable injecting malicious code in the boot chain
- willis936 3y agoWhen changing security processors the secure boot drive requires the entry of the secret key again. If a user enters the secret key on a compromised system then the game would be up. You would need to wait until the user decided to change the security processor to intercept quietly.