kek_update_map.json is no longer a valid JSON file

[woodlands67]

kek_update_map.json is no longer a valid JSON file, because of syntax errors surrounding this inserted block:

"288fbed9acd7fdbb7fc87a1cd64c8c893d8d5a14": {
    "KEKUpdate": "MEDION\\KEKUpdate_PK1.bin",
    "Certificate": {
        "serial_number": 179793435848490317188102839746769023911,
        "issued_to": "CN=MEDION Certificate",
        "issued_by": "CN=MEDION Certificate"
    }
},
"5fb475a6dbbd6eeb7145dee46c55feea1f1ad444": {
    "KEKUpdate": "MEDION\\KEKUpdate_PK2.bin",
    "Certificate": {
        "serial_number": 157348579362544316338617078756374669701,
        "issued_to": "CN=MEDION Certificate",
        "issued_by": "CN=MEDION Certificate"
    }
},
"961021660f68e24430288803ed9c848354bb177e": {
    "KEKUpdate": "MEDION\\KEKUpdate_PK3.bin",
    "Certificate": {
        "serial_number": 70577371397206560837050816373159487978,
        "issued_to": "CN=MEDION_AG",
        "issued_by": "CN=MEDION_AG"
    }
},
"8058e8cc51749652804bbd6f39aed713d119c64b": {
    "KEKUpdate": "Microsoft\\KEKUpdate_Microsoft_PK1.bin",
    "Certificate": {
        "serial_number": 171049019130091589582073331848314912,
        "issued_to": "CN=Microsoft Hyper-V Firmware PK,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US",
        "issued_by": "CN=Microsoft Corporation Third Party Marketplace PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US"
    }
},

Confirmed by passing raw JSON to two different online checkers.

[Flickdm]

See #325

[woodlands67]

Why does the JSON list the same serial_number twice?

    "288fbed9acd7fdbb7fc87a1cd64c8c893d8d5a14": {
        "KEKUpdate": "Lenovo\\KEKUpdate_Lenovo_PK290.bin",
        "Certificate": {
            "serial_number": 179793435848490317188102839746769023911,
            "issued_to": "CN=MEDION Certificate",
            "issued_by": "CN=MEDION Certificate"
        }
    },

    "288fbed9acd7fdbb7fc87a1cd64c8c893d8d5a14": {
        "KEKUpdate": "MEDION\\KEKUpdate_PK1.bin",
        "Certificate": {
            "serial_number": 179793435848490317188102839746769023911,
            "issued_to": "CN=MEDION Certificate",
            "issued_by": "CN=MEDION Certificate"
        }
    }

[woodlands67]

Medion is a subsidiary of Lenovo, someone has to figure out which of the two entries will remain.

[Flickdm]

@woodlands67 - I think I can close this out. I've changed the instructions from doing this by hand to using my script which removes duplicates.

What I guess you're seeing is someone at both Lenovo and MEDION submitted the same file with two names. Both files would be expected to work on a MEDION device.

For example:

PS C:\git\microsoft\secureboot_objects> python .\scripts\get_auth_var_signing_certificate.py '.\PostSignedObjects\KEK\Lenovo\KEKUpdate_Lenovo_PK290.bin'
2025-12-16 11:03:21,560 - INFO - Signing certificate extracted successfully.
2025-12-16 11:03:21,562 - INFO - Certificate saved as '.\PostSignedObjects\KEK\Lenovo\KEKUpdate_Lenovo_PK290.bin.signing_certificate.der'
2025-12-16 11:03:21,562 - INFO - SHA1 thumbprint: 288fbed9acd7fdbb7fc87a1cd64c8c893d8d5a14
2025-12-16 11:03:21,562 - INFO - SHA256 thumbprint: a00bde5a9851c1ac4b76555f38ea3a5657a0874006931c7e40d40368a1423647
2025-12-16 11:03:21,563 - INFO -
2025-12-16 11:03:21,563 - INFO - Certificate Information:
2025-12-16 11:03:21,563 - INFO -   Serial Number: 8742f4c8e657b4a44f303df3728573a7
2025-12-16 11:03:21,563 - INFO -   Issued To: CN=MEDION Certificate
2025-12-16 11:03:21,563 - INFO -   Issued By: CN=MEDION Certificate

(venv) PS C:\git\microsoft\secureboot_objects> python .\scripts\get_auth_var_signing_certificate.py .\PostSignedObjects\KEK\MEDION\KEKUpdate_PK1.bin
2025-12-16 11:04:19,261 - INFO - Signing certificate extracted successfully.
2025-12-16 11:04:19,261 - INFO - Certificate saved as '.\PostSignedObjects\KEK\MEDION\KEKUpdate_PK1.bin.signing_certificate.der'
2025-12-16 11:04:19,261 - INFO - SHA1 thumbprint: 288fbed9acd7fdbb7fc87a1cd64c8c893d8d5a14
2025-12-16 11:04:19,261 - INFO - SHA256 thumbprint: a00bde5a9851c1ac4b76555f38ea3a5657a0874006931c7e40d40368a1423647
2025-12-16 11:04:19,261 - INFO -
2025-12-16 11:04:19,261 - INFO - Certificate Information:
2025-12-16 11:04:19,261 - INFO -   Serial Number: 8742f4c8e657b4a44f303df3728573a7
2025-12-16 11:04:19,261 - INFO -   Issued To: CN=MEDION Certificate
2025-12-16 11:04:19,261 - INFO -   Issued By: CN=MEDION Certificate

I won't delete the file (at least for now) since this is what was given to us but I do not believe this is an issue with the latest json file.