There is a great tutorial about signing EFI binaries using sbsigntools by Rod Smith, however this won't work with Apple's binaries. pesign from Red Hat is a better and more robust alternative in my opinion. It also brings its own keygen for creating compatible SSL keys and uses Mozilla's NSS to store them in a secure database. Neat!
Showing posts with label macos. Show all posts
Showing posts with label macos. Show all posts
8/12/2018
Enable Secure Boot with Your own Keys
Using Secure Boot with Linux is quite a challenge because most mainboards only have Microsoft's own KEK and DB keys installed. There are possibilities like shim, but that's quite cumbersome and it won't work for macOS (if you are running a "Hackintosh"). Creating your own Secure Boot keys is the most elegant way and will work for Windows, Linux and macOS.
There is a great tutorial about signing EFI binaries using sbsigntools by Rod Smith, however this won't work with Apple's binaries. pesign from Red Hat is a better and more robust alternative in my opinion. It also brings its own keygen for creating compatible SSL keys and uses Mozilla's NSS to store them in a secure database. Neat!
There is a great tutorial about signing EFI binaries using sbsigntools by Rod Smith, however this won't work with Apple's binaries. pesign from Red Hat is a better and more robust alternative in my opinion. It also brings its own keygen for creating compatible SSL keys and uses Mozilla's NSS to store them in a secure database. Neat!
Subscribe to:
Posts (Atom)