Re: [edk2-buildtools] Secure boot question?

[Richardson, B. <bri...@in...>]

No. All of the add-in drivers (option ROMs on PCIe cards) and pre-OS apps (utilities & OS loaders) need to be signed by the same authority, since they are outside of the system BIOS/firmware. Binaries in the BIOS image don't have to be signed, since the BIOS has its own integrity checking mechanism.

Thanks ... br
---
Brian Richardson -- bri...@in... -- Twitter: intel_brian

From: David Cox [mailto:dav...@au...]
Sent: Wednesday, July 30, 2014 5:33 AM
To: edk...@li...
Subject: [edk2-buildtools] Secure boot question?

Hi,

If I enable secure boot, generate keys, sign an EDK2 binary (EFI) application - do I have to make sure every module in the bios image is signed?  Including free form sections?  TE images?  Along with every driver DXE EFI?  Trouble is right now I only have the source EFI for my application.

Regards,

Dave Cox

________________________________
[http://www2.autologic.com/logo.gif]

David Cox
Hardware Engineer
Autologic Diagnostics Ltd
Tel: +44 1865 870050
Mobile:
Fax: +44 1865 870051
Email: dav...@au...<mailto:dav...@au...>
Website: www.autologic.com<http://www.autologic.com>


This message contains information which may be confidential and is intended for the named addressee only. Unless you are the named addressee, or authorised to receive it on behalf of the addressee you may not copy or use it, or disclose it to anyone else. Any views or opinions expressed in this message are those of the author and not necessarily representative of those of Autologic Diagnostics Ltd. Whilst every endeavour is taken to ensure that e-mails are free from viruses, no liability can be accepted and the recipient is requested to use their own virus checking software. If you have received this email in error please accept our apology and contact the sender. All work carried out on any vehicle using Autologic diagnostic equipment must be carried out in strict accordance with the instructions contained within the relevant manufacturer's workshop manuals. Autologic Diagnostics limited accepts no responsibility or liability for any damage or claim arising from any work carried out by operatives using equipment supplied by Autologic Diagnostics limited. Registered Office: Autologic House, London Road, Wheatley, Oxon, OX33 1JH, England, UK Registered in England & Wales No. 06814180