!agkXCfUrgbadYlQXRj:kack.it

NixOS + TPMs

177 Members
43 Servers

You have reached the beginning of time (for this room).

SenderMessageTime
12 May 2023
@samueldr:matrix.orgsamueldr changed their profile picture.02:29:46
@lassulus:lassul.uslassulus changed their profile picture.10:12:06
@lassulus:lassul.uslassulus changed their profile picture.13:39:13
14 May 2023
@sympt:matrix.orgsympt joined the room.07:33:28
15 May 2023
@genericnerdyusername:matrix.orgGenericNerdyUsername idk if this is more of a question for https://matrix.to/#/#secure-boot:nixos.org, but https://uapi-group.org/specifications/specs/linux_tpm_pcr_registry/ says PCR 7 changes when UEFI SecureBoot mode is enabled/disabled, or firmware certificates (PK, KEK, db, dbx, …) are updated. The shim project will measure most of its (non-MOK) certificates and SBAT data into this PCR. 20:38:49
@genericnerdyusername:matrix.orgGenericNerdyUsernameWhat do I do if I want to update the dbx?20:39:15
@genericnerdyusername:matrix.orgGenericNerdyUsername * What do I do if I want to update the dbx, but have a key sealed against PCR7?20:40:34

Show newer messages

Back to Room ListRoom Version: 6