* Gerd Hoffmann: >> At least for me it seems to be a extremely generic update that doesn't rely >> on hardware specific characteristics as is with a full BIOS update. > > Correct. It's literally just the new ms kek key with a pkcs7 signature > from the hardware vendor's PK key. No code update.
Still it needs to go through QA because it has a significant risk of corrupting the boot path. Thanks, Florian -- _______________________________________________ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue