Re: [PATCH v2] eficonfig: EFI_VARIABLE_APPEND_WRITE is not set for null key

2022-12-20 Thread Heinrich Schuchardt
On 12/20/22 10:38, Masahisa Kojima wrote: The signed null key with authenticated header is used to clear the PK, KEK, db and dbx. When CONFIG_EFI_MM_COMM_TEE is enabled (StMM and OP-TEE based RPMB storage is used as the EFI variable storage), clearing KEK, db and dbx by enrolling a signed null ke

[PATCH v2] eficonfig: EFI_VARIABLE_APPEND_WRITE is not set for null key

2022-12-20 Thread Masahisa Kojima
The signed null key with authenticated header is used to clear the PK, KEK, db and dbx. When CONFIG_EFI_MM_COMM_TEE is enabled (StMM and OP-TEE based RPMB storage is used as the EFI variable storage), clearing KEK, db and dbx by enrolling a signed null key does not work as expected if EFI_VARIABLE_