-
Notifications
You must be signed in to change notification settings - Fork 332
Closed
Description
I'm trying to do boot measurements on RHEL8 machines. And I'm having issues with the following Event in the binary_bios_measurements:
- EventNum: 27
PCRIndex: 7
EventType: EV_EFI_VARIABLE_AUTHORITY
DigestCount: 3
Digests:- AlgorithmId: sha1
Digest: "3efeb87af48ab5aee7fcbd3514bab719ed865c1c" - AlgorithmId: sha256
Digest: "5f62a2107fa11ce0485fd252d2e6c603cb8ed075861f9513bfed0a26bf6ed62b" - AlgorithmId: sha384
Digest: "841b29f5200c91e1a02e64a6636587bac5b85496a67e6d3c3cf52415a7ab726b4d2259134d84e9082191ac8ee15b7890"
EventSize: 61
Event:
VariableName: 605dab50-e046-4300-abb6-3dd810dd8b23
UnicodeNameLength: 14
VariableDataLength: 1
UnicodeName: MokListTrusted
VariableData: "01"
- AlgorithmId: sha1
Please correct me if I'm wrong but I thinks that as in TCG PC Client PlatformFirmware ProfileSpecification page 54, since the event type is a EV_EFI_VARIABLE_AUTHORITY the UEFI_VARIABLE_DATA.VariableData should be the EFI_SIGNATURE_DATA value
from the EFI_SIGNATURE_LIST that contained the authority that was used to validate the image. And in this boot measurement the VariableData is just "01".
Really appreciate your support on this!
Metadata
Metadata
Assignees
Labels
No labels