uefi-ref/edk2
1
0
Fork 0
mirror of https://github.com/tianocore/edk2 synced 2026-08-27 00:23:19 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

OvmfPkg: set PcdRequireSelfSignedPk to FALSE

Browse source 
Recent UEFI spec versions do not require a self-signed PK any more.
There is no good reason for OVMF to stick to this requirement, but
there is one reason to remove it:  It is not needed to enable
CustomMode then to enroll secure boot keys which are not self-signed.

Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
This commit is contained in:
Gerd Hoffmann 2026-04-02 08:27:09 +02:00 • committed by mergify[bot]
parent 3ed3b7a4ae
commit 3c01a11daa
7 changed files with 7 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

2
OvmfPkg/Bhyve/BhyveX64.dsc
View file

@ -434,7 +434,7 @@
gEfiMdeModulePkgTokenSpaceGuid.PcdConOutGopSupport|TRUE
gEfiMdeModulePkgTokenSpaceGuid.PcdInstallAcpiSdtProtocol|TRUE
!if $(SECURE_BOOT_ENABLE) == TRUE
gEfiMdeModulePkgTokenSpaceGuid.PcdRequireSelfSignedPk|TRUE
gEfiMdeModulePkgTokenSpaceGuid.PcdRequireSelfSignedPk|FALSE
!endif
[PcdsFixedAtBuild]

2
OvmfPkg/CloudHv/CloudHvX64.dsc
View file

@ -485,7 +485,7 @@
!endif
!if $(SECURE_BOOT_ENABLE) == TRUE
gUefiOvmfPkgTokenSpaceGuid.PcdSecureBootSupported|TRUE
gEfiMdeModulePkgTokenSpaceGuid.PcdRequireSelfSignedPk|TRUE
gEfiMdeModulePkgTokenSpaceGuid.PcdRequireSelfSignedPk|FALSE
!endif
[PcdsFixedAtBuild]

2
OvmfPkg/IntelTdx/IntelTdxX64.dsc
View file

@ -380,7 +380,7 @@
gEfiMdeModulePkgTokenSpaceGuid.PcdInstallAcpiSdtProtocol|TRUE
!if $(SECURE_BOOT_ENABLE) == TRUE
gUefiOvmfPkgTokenSpaceGuid.PcdSecureBootSupported|TRUE
gEfiMdeModulePkgTokenSpaceGuid.PcdRequireSelfSignedPk|TRUE
gEfiMdeModulePkgTokenSpaceGuid.PcdRequireSelfSignedPk|FALSE
!endif
[PcdsFixedAtBuild]

2
OvmfPkg/LoongArchVirt/LoongArchVirtQemu.dsc
View file

@ -345,7 +345,7 @@
!endif
!if $(SECURE_BOOT_ENABLE) == TRUE
gUefiOvmfPkgTokenSpaceGuid.PcdSecureBootSupported | TRUE
gEfiMdeModulePkgTokenSpaceGuid.PcdRequireSelfSignedPk | TRUE
gEfiMdeModulePkgTokenSpaceGuid.PcdRequireSelfSignedPk | FALSE
!endif
[PcdsFixedAtBuild]
## BaseLib ##

2
OvmfPkg/Microvm/MicrovmX64.dsc
View file

@ -489,7 +489,7 @@
gEfiMdeModulePkgTokenSpaceGuid.PcdInstallAcpiSdtProtocol|TRUE
!if $(SECURE_BOOT_ENABLE) == TRUE
gUefiOvmfPkgTokenSpaceGuid.PcdSecureBootSupported|TRUE
gEfiMdeModulePkgTokenSpaceGuid.PcdRequireSelfSignedPk|TRUE
gEfiMdeModulePkgTokenSpaceGuid.PcdRequireSelfSignedPk|FALSE
!endif
[PcdsFixedAtBuild]

2
OvmfPkg/OvmfPkgIa32X64.dsc
View file

@ -494,7 +494,7 @@
!endif
!if $(SECURE_BOOT_ENABLE) == TRUE
gUefiOvmfPkgTokenSpaceGuid.PcdSecureBootSupported|TRUE
gEfiMdeModulePkgTokenSpaceGuid.PcdRequireSelfSignedPk|TRUE
gEfiMdeModulePkgTokenSpaceGuid.PcdRequireSelfSignedPk|FALSE
!endif
[PcdsFixedAtBuild]

2
OvmfPkg/OvmfPkgX64.dsc
View file

@ -575,7 +575,7 @@
!endif
!if $(SECURE_BOOT_ENABLE) == TRUE
gUefiOvmfPkgTokenSpaceGuid.PcdSecureBootSupported|TRUE
gEfiMdeModulePkgTokenSpaceGuid.PcdRequireSelfSignedPk|TRUE
gEfiMdeModulePkgTokenSpaceGuid.PcdRequireSelfSignedPk|FALSE
!endif
[PcdsFixedAtBuild]