diff options
| author | Alex <kavsrf@gmail.com> | 2016-08-15 17:11:31 +0200 |
|---|---|---|
| committer | Mounir IDRASSI <mounir.idrassi@idrix.fr> | 2016-08-15 17:14:26 +0200 |
| commit | b87fc6b140772ba3017de311c7063c259424264c (patch) | |
| tree | 41ad139e7469380704361ae757a155464e8b68e3 /SecureBoot/readme.txt | |
| parent | 68ea2f72cfe6a9b34212ced97882e488c73c8f1d (diff) | |
| download | VeraCrypt-DCS-b87fc6b140772ba3017de311c7063c259424264c.tar.gz VeraCrypt-DCS-b87fc6b140772ba3017de311c7063c259424264c.zip | |
First public release. Used by VeraCrypt 1.18.VeraCrypt_1.18_PreRelease
Diffstat (limited to 'SecureBoot/readme.txt')
| -rw-r--r-- | SecureBoot/readme.txt | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/SecureBoot/readme.txt b/SecureBoot/readme.txt new file mode 100644 index 0000000..6e2dc43 --- /dev/null +++ b/SecureBoot/readme.txt @@ -0,0 +1,13 @@ +To update secure boot configuration
+1. Enter BIOS configuration
+2. Switch Secure boot to setup mode (or custom mode). It deletes PK (platform certificate) and allows to load DCS platform key.
+3. Boot Windows
+4. execute from admin command prompt
+ powershell -File sb_set_siglists.ps1
+It sets in PK (platform key) - DCS_platform
+It sets in KEK (key exchange key) - DCS_key_exchange
+It sets in db - DCS_sign MicWinProPCA2011_2011-10-19 MicCorUEFCA2011_2011-06-27
+
+All DCS modules are protected by DCS_sign.
+All Windows modules are protected by MicWinProPCA2011_2011-10-19
+All SHIM(linux) modules are protected by MicCorUEFCA2011_2011-06-27
\ No newline at end of file |