Skip to content

Commit e64d1a5

Browse files
committed
Updating template files
1 parent 8e4d0ae commit e64d1a5

5 files changed

Lines changed: 12 additions & 32 deletions

File tree

Templates/LegacyFirmwareDefaults.toml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -162,6 +162,6 @@ signature_owner = "77fa9abd-0359-4d32-bd60-28f4e78f784b"
162162
help = "Contains a list of revoked certificates that will not execute on this system. Filtered per Architecture (ARM, Intel)."
163163

164164
[[DefaultDbx.files]]
165-
path = "PreSignedObjects/DBX/dbx_info_msft_10_14_25.json"
166-
sha1 = 0x1DD8DECFC1EC56524C8EFC045B96A93C1FB3D411
165+
path = "PreSignedObjects/DBX/dbx_info_msft_latest.json"
166+
sha1 = 0x8818A4486178E0B253FBBB6F0A9E64DC144E2480
167167
signature_owner = "77fa9abd-0359-4d32-bd60-28f4e78f784b"

Templates/MicrosoftAndOptionRoms.toml

Lines changed: 2 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -61,11 +61,6 @@ description = "2023+ signed UEFI Third-Party Option ROMs (e.g. Graphics/Storage/
6161
help = "Contains a list of revoked certificates that will not execute on this system. Filtered per Architecture (ARM, Intel)."
6262

6363
[[DBX.files]]
64-
#
65-
# New recommendation is to allow the OS to manage the dbx and not ship a DefaultDbx with the firmware.
66-
# A valid configuration is to ship an unset DBX variable.
67-
#
68-
path = "PreSignedObjects/DBX/dbx.empty"
69-
sha1 = 0xF8D326CCD9233747A29E2F67AFEB77C25787BD39
64+
path = "PreSignedObjects/DBX/dbx_info_msft_latest.json"
65+
sha1 = 0x8818A4486178E0B253FBBB6F0A9E64DC144E2480
7066
signature_owner = "77fa9abd-0359-4d32-bd60-28f4e78f784b"
71-
description = "Special file to create an empty signature database."

Templates/MicrosoftAndThirdParty.toml

Lines changed: 3 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -73,11 +73,6 @@ description = "2011 signed UEFI Applications and Third-Party Option ROMs (e.g. 2
7373
help = "Contains a list of revoked certificates that will not execute on this system. Filtered per Architecture (ARM, Intel)."
7474

7575
[[DBX.files]]
76-
#
77-
# New recommendation is to allow the OS to manage the dbx and not ship a DefaultDbx with the firmware.
78-
# A valid configuration is to ship an unset DBX variable.
79-
#
80-
path = "PreSignedObjects/DBX/dbx.empty"
81-
sha1 = 0xF8D326CCD9233747A29E2F67AFEB77C25787BD39
82-
signature_owner = "77fa9abd-0359-4d32-bd60-28f4e78f784b"
83-
description = "Special file to create an empty signature database."
76+
path = "PreSignedObjects/DBX/dbx_info_msft_latest.json"
77+
sha1 = 0x8818A4486178E0B253FBBB6F0A9E64DC144E2480
78+
signature_owner = "77fa9abd-0359-4d32-bd60-28f4e78f784b"

Templates/MicrosoftOnly.toml

Lines changed: 3 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -54,11 +54,6 @@ description = "2023+ signed Windows Boot Media (e.g. 2023 signed Windows)"
5454
help = "Contains a list of revoked certificates that will not execute on this system. Filtered per Architecture (ARM, Intel)."
5555

5656
[[DefaultDbx.files]]
57-
#
58-
# New recommendation is to allow the OS to manage the dbx and not ship a DefaultDbx with the firmware.
59-
# A valid configuration is to ship an unset DBX variable.
60-
#
61-
path = "PreSignedObjects/DBX/dbx.empty"
62-
sha1 = 0xF8D326CCD9233747A29E2F67AFEB77C25787BD39
63-
signature_owner = "77fa9abd-0359-4d32-bd60-28f4e78f784b"
64-
description = "Special file to create an empty signature database."
57+
path = "PreSignedObjects/DBX/dbx_info_msft_latest.json"
58+
sha1 = 0x8818A4486178E0B253FBBB6F0A9E64DC144E2480
59+
signature_owner = "77fa9abd-0359-4d32-bd60-28f4e78f784b"

Templates/MostCompatible.toml

Lines changed: 2 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -82,11 +82,6 @@ description = "2011 signed Third-Party UEFI Applications and Third-Party Option
8282
help = "Contains a list of revoked certificates that will not execute on this system. Filtered per Architecture (ARM, Intel)."
8383

8484
[[DBX.files]]
85-
#
86-
# New recommendation is to allow the OS to manage the dbx and not ship a DefaultDbx with the firmware.
87-
# A valid configuration is to ship an unset DBX variable.
88-
#
89-
path = "PreSignedObjects/DBX/dbx.empty"
90-
sha1 = 0xF8D326CCD9233747A29E2F67AFEB77C25787BD39
85+
path = "PreSignedObjects/DBX/dbx_info_msft_latest.json"
86+
sha1 = 0x8818A4486178E0B253FBBB6F0A9E64DC144E2480
9187
signature_owner = "77fa9abd-0359-4d32-bd60-28f4e78f784b"
92-
description = "Special file to create an empty signature database."

0 commit comments

Comments
 (0)