diff options
Diffstat (limited to 'system/efitools/README')
| -rw-r--r-- | system/efitools/README | 30 |
1 files changed, 23 insertions, 7 deletions
diff --git a/system/efitools/README b/system/efitools/README index 796f9b00d2..d10aac7922 100644 --- a/system/efitools/README +++ b/system/efitools/README @@ -1,17 +1,33 @@ +## README efitools efitools is a set of tools for manipulating EFI secure boot platforms. If you ever plan to use LockDown.efi (it's an EFI program that -installs a predefined set of Secure Boot keys if you run it while your -machine is in setup mode) you will want to use your own Secure Boot -keys and maybe specify an owner GUID (in hex). The keys should be placed -in the SlackBuild directory and named: +installs a predefined set of Secure Boot keys if you run it while +your machine is in setup mode) you will want to use your own Secure +Boot keys and maybe specify an owner GUID (in hex). The keys should +be placed in the SlackBuild directory and named: Platform Key public/private keys - PK.crt, PK.key Key Exchange public/private keys - KEK.crt, KEK.key Signature Database public/private keys - DB.crt, DB.key and the SlackBuild should be executed using: -GUID=xxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx USE_KEYS=yes ./efitools.SlackBuild +GUID=xxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx USE_KEYS=yes \ + ./efitools.SlackBuild -It's unlikely that you'll use LockDown.efi and there are alternate methods -to do what it does, so it's fine just to ignore it. +efitool-mkusb to make a bootable usbstick, the process will delete +all files on the usbstick. + +It's unlikely that you'll use LockDown.efi and there are alternate +methods to do what it does, so it's fine just to ignore it. + +WARNING!!!! PLEASE MAKE SURE YOU KNOW EXACTLY WHAT YOU ARE DOING +BEFORE PROCEEDING. + +SlackBuilds.org 2023 accepts no liability for any issues caused by +using this software. The software is provided as is and requires a +working knowledge, of setting up +secure booting and keys. + +For information how to use this software for secure/boot on Linux +please see the included. README.Secure_Boot |