https://github.com/fwupd/dbx-firmware

DBXUpdate files from Microsoft
https://github.com/fwupd/dbx-firmware

Last synced: about 2 months ago
JSON representation

DBXUpdate files from Microsoft

• Host: GitHub
• URL: https://github.com/fwupd/dbx-firmware
• Owner: fwupd
• License: other
• Created: 2020-08-17T14:46:52.000Z (over 4 years ago)
• Default Branch: master
• Last Pushed: 2024-03-21T12:19:47.000Z (10 months ago)
• Last Synced: 2024-08-05T23:07:40.523Z (5 months ago)
• Language: Python
• Size: 303 KB
• Stars: 14
• Watchers: 7
• Forks: 2
• Open Issues: 3
• Metadata Files:
  • Readme: README.md
  • License: COPYING

Awesome Lists containing this project

README

        
# UEFI Revocation

DBXUpdate files from Microsoft, specifically from https://uefi.org/revocationlistfile

These files are used to update the Secure Boot Forbidden Signature Database, dbx.

Example usage:

    SetVariable("dbx", EFI_IMAGE_SECURITY_DATABASE_GUID, NV+BS+RT+AT+AppendWrite, sz, buf);

The dbx files already contains a Microsoft KEK signature, encoded as specified

by the UEFI specification.

UEFI Revocation List files contain the, now-revoked, signatures of previously

approved and signed firmware and software used in booting systems with UEFI

Secure Boot enabled.

Distribution of the data in these files to running systems could cause

instability and should only be attempted by security experts and professionals.

System OEMs can use these files to test their platform firmware.