diff mbox series

[isar-cip-core,1/2] doc/README.secureboot.md: Add information of DB and KEK in case of snakeoil keys

Message ID 20240712084557.3351285-2-Shivanand.Kunijadar@toshiba-tsip.com (mailing list archive)
State Accepted
Headers show
Series Update docs | expand

Commit Message

Shivanand Kunijadar July 12, 2024, 8:45 a.m. UTC
Signed-off-by: Shivanand Kunijadar <Shivanand.Kunijadar@toshiba-tsip.com>
---
 doc/README.secureboot.md | 2 ++
 1 file changed, 2 insertions(+)
diff mbox series

Patch

diff --git a/doc/README.secureboot.md b/doc/README.secureboot.md
index 337ece0..8ab67a8 100644
--- a/doc/README.secureboot.md
+++ b/doc/README.secureboot.md
@@ -308,6 +308,8 @@  sign-efi-sig-list -k recipes-devtools/secure-boot-secrets/files/bookworm/PkKek-1
 
 The package `efitools` needs to be installed for this.
 
+In this case, the PK.esl can be used as DB and KEK keys. The PK.auth file is for PK key.
+
 ### Secure boot key enrollment
 
 > :exclamation:**IMPORTANT** This document is not for generating a Machine Owner Key(MOK).