From 6db4cbaaffefd284f0ac056313a619594a5cbd04 Mon Sep 17 00:00:00 2001 From: Mounir IDRASSI Date: Fri, 22 Jun 2018 00:51:50 +0200 Subject: Update SecureBoot PowerShell to support loading several manufacturers certificates. Add signed manufacturers certificates to help in this process. --- SecureBoot/readme.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'SecureBoot/readme.txt') diff --git a/SecureBoot/readme.txt b/SecureBoot/readme.txt index ce2d3d3..a38d7c7 100644 --- a/SecureBoot/readme.txt +++ b/SecureBoot/readme.txt @@ -6,7 +6,8 @@ to update Secure Boot configuration steps: 1. Enter BIOS configuration 2. Switch Secure boot to setup mode (or custom mode). It deletes PK (platform certificate) and allows to load DCS platform key. 3. Boot Windows -4. execute from admin command prompt +4. Edit the file sb_set_siglists.ps1 and uncomment the lines related to the manufacturer of the machine. +5. execute from admin command prompt powershell -ExecutionPolicy Bypass -File sb_set_siglists.ps1 It sets in PK (platform key) - DCS_platform It sets in KEK (key exchange key) - DCS_key_exchange -- cgit v1.2.3