-
Notifications
You must be signed in to change notification settings - Fork 104
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Feature/MsApplicationPkg/SecureBootRecovery #323
Feature/MsApplicationPkg/SecureBootRecovery #323
Conversation
This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation. |
Introduces 4 new commits in [Common/MU](https://github.com/microsoft/mu_plus.git). <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/microsoft/mu_plus/commit/ba9870b8227b82c7dd3fcb872f3d8a28cec5335b">ba9870</a> pip: bump edk2-pytool-library from 0.18.0 to 0.18.1 (<a href="https://github.com/microsoft/mu_plus/pull/321">#321</a>)</li> <li><a href="https://github.com/microsoft/mu_plus/commit/ea1d3720bed1baf2be59528b52e595bbd6c48cfe">ea1d37</a> Feature/MsApplicationPkg/SecureBootRecovery (<a href="https://github.com/microsoft/mu_plus/pull/323">#323</a>)</li> <li><a href="https://github.com/microsoft/mu_plus/commit/43bf1481613a77e8c4548cfb09f0cab49f8a79cb">43bf14</a> pip: bump regex from 2023.8.8 to 2023.10.3 (<a href="https://github.com/microsoft/mu_plus/pull/326">#326</a>)</li> <li><a href="https://github.com/microsoft/mu_plus/commit/7b3ffc928b3256d851aef7499e314f24a6c10c99">7b3ffc</a> pip: bump edk2-pytool-library from 0.18.1 to 0.18.2 (<a href="https://github.com/microsoft/mu_plus/pull/325">#325</a>)</li> </ul> </details> Signed-off-by: Project Mu Bot <[email protected]>
Introduces 4 new commits in [Common/MU](https://github.com/microsoft/mu_plus.git). <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/microsoft/mu_plus/commit/ba9870b8227b82c7dd3fcb872f3d8a28cec5335b">ba9870</a> pip: bump edk2-pytool-library from 0.18.0 to 0.18.1 (<a href="https://github.com/microsoft/mu_plus/pull/321">#321</a>)</li> <li><a href="https://github.com/microsoft/mu_plus/commit/ea1d3720bed1baf2be59528b52e595bbd6c48cfe">ea1d37</a> Feature/MsApplicationPkg/SecureBootRecovery (<a href="https://github.com/microsoft/mu_plus/pull/323">#323</a>)</li> <li><a href="https://github.com/microsoft/mu_plus/commit/43bf1481613a77e8c4548cfb09f0cab49f8a79cb">43bf14</a> pip: bump regex from 2023.8.8 to 2023.10.3 (<a href="https://github.com/microsoft/mu_plus/pull/326">#326</a>)</li> <li><a href="https://github.com/microsoft/mu_plus/commit/7b3ffc928b3256d851aef7499e314f24a6c10c99">7b3ffc</a> pip: bump edk2-pytool-library from 0.18.1 to 0.18.2 (<a href="https://github.com/microsoft/mu_plus/pull/325">#325</a>)</li> </ul> </details> Signed-off-by: Project Mu Bot <[email protected]>
Bumps Common/MU from `2023020001.5.1` to `2023020001.5.2` Introduces 4 new commits in [Common/MU](https://github.com/microsoft/mu_plus.git). <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/microsoft/mu_plus/commit/ba9870b8227b82c7dd3fcb872f3d8a28cec5335b">ba9870</a> pip: bump edk2-pytool-library from 0.18.0 to 0.18.1 (<a href="https://github.com/microsoft/mu_plus/pull/321">#321</a>)</li> <li><a href="https://github.com/microsoft/mu_plus/commit/ea1d3720bed1baf2be59528b52e595bbd6c48cfe">ea1d37</a> Feature/MsApplicationPkg/SecureBootRecovery (<a href="https://github.com/microsoft/mu_plus/pull/323">#323</a>)</li> <li><a href="https://github.com/microsoft/mu_plus/commit/43bf1481613a77e8c4548cfb09f0cab49f8a79cb">43bf14</a> pip: bump regex from 2023.8.8 to 2023.10.3 (<a href="https://github.com/microsoft/mu_plus/pull/326">#326</a>)</li> <li><a href="https://github.com/microsoft/mu_plus/commit/7b3ffc928b3256d851aef7499e314f24a6c10c99">7b3ffc</a> pip: bump edk2-pytool-library from 0.18.1 to 0.18.2 (<a href="https://github.com/microsoft/mu_plus/pull/325">#325</a>)</li> </ul> </details> Signed-off-by: Project Mu Bot <[email protected]> Signed-off-by: Project Mu Bot <[email protected]>
Description
This Secure Boot Recovery application, when ran will append a 2011 KEK signed 2023 Certificate to the DB. This may be used to fix the DB for in market devices in order to boot a 2023 signed Boot loader.
Impacts functionality?
N/A
Impacts security?
N/A
validation improvement, ...
Breaking change?
N/A
Includes tests?
N/A
Includes documentation?
Readme.md
Explains how to build the application
How This Was Tested
This was tested on a handful of in market devices (AARCH64 and X64) by different OEMS.
This was tested using test payloads and the real payload in order to verify it would work as expected
Integration Instructions
N/A