Skip to content
体验新版
项目
组织
正在加载...
登录
切换导航
打开侧边栏
btwise
OpenCorePKG_MOD
提交
c7f1aa52
O
OpenCorePKG_MOD
项目概览
btwise
/
OpenCorePKG_MOD
通知
26
Star
0
Fork
0
代码
文件
提交
分支
Tags
贡献者
分支图
Diff
Issue
0
列表
看板
标记
里程碑
合并请求
0
Wiki
0
Wiki
分析
仓库
DevOps
项目成员
Pages
O
OpenCorePKG_MOD
项目概览
项目概览
详情
发布
仓库
仓库
文件
提交
分支
标签
贡献者
分支图
比较
Issue
0
Issue
0
列表
看板
标记
里程碑
合并请求
0
合并请求
0
Pages
分析
分析
仓库分析
DevOps
Wiki
0
Wiki
成员
成员
收起侧边栏
关闭侧边栏
动态
分支图
创建新Issue
提交
Issue看板
体验新版 GitCode,发现更多精彩内容 >>
提交
c7f1aa52
编写于
4月 14, 2019
作者:
V
vit9696
浏览文件
操作
浏览文件
下载
电子邮件补丁
差异文件
Docs: Clarify RequireSignature nuances
上级
6c0a4d22
变更
2
隐藏空白更改
内联
并排
Showing
2 changed file
with
12 addition
and
1 deletion
+12
-1
Docs/Configuration.pdf
Docs/Configuration.pdf
+0
-0
Docs/Configuration.tex
Docs/Configuration.tex
+12
-1
未找到文件。
Docs/Configuration.pdf
浏览文件 @
c7f1aa52
无法预览此类型文件
Docs/Configuration.tex
浏览文件 @
c7f1aa52
...
...
@@ -1371,6 +1371,9 @@ nvram 4D1FDA02-38C7-4A6A-9CC6-4BCCA8B30102:boot-log |
To create this file automatically use
\href
{
https://github.com/acidanthera/OcSupportPkg/tree/master/Tools/Vault
}{
\texttt
{
create
\_
vault.sh
}}
script.
Regardless of the underlying filesystem, path name and case must match
between
\texttt
{
config.plist
}
and
\texttt
{
vault.plist
}
.
\emph
{
Note
}
:
\texttt
{
vault.plist
}
is tried to be read regardless of the value
of this option, but setting it to
\texttt
{
true
}
will ensure configuration
sanity, and abort the boot process.
...
...
@@ -1380,7 +1383,7 @@ nvram 4D1FDA02-38C7-4A6A-9CC6-4BCCA8B30102:boot-log |
\begin{itemize}
\tightlist
\item
Create
\texttt
{
vault.plist
}
.
\item
Create a new RSA key.
\item
Create a new RSA key
(always do this to avoid loading old configuration)
.
\item
Embed RSA key into
\texttt
{
OpenCore.efi
}
.
\item
Create
\texttt
{
vault.sig
}
.
\end{itemize}
...
...
@@ -1395,6 +1398,14 @@ dd of=OpenCore.efi if=vault.pub bs=1 seek=$off count=520 conv=notrunc
rm vault.pub
\end
{
lstlisting
}
\emph
{
Note
}
: While it may appear obvious, but you have to use an external
method to verify
\texttt
{
OpenCore.efi
}
and
\texttt
{
BOOTx
64
.efi
}
for
secure boot path. For this you are recommended to at least enable UEFI SecureBoot
with a custom certificate, and sign
\texttt
{
OpenCore.efi
}
and
\texttt
{
BOOTx
64
.efi
}
with your custom key. More details on customising secure boot on modern firmwares
can be found in
\href
{
https:
//
habr.com
/
post
/
273497
/
}{
Taming UEFI SecureBoot
}
paper
(
in Russian
)
.
\end
{
enumerate
}
\section
{
NVRAM
}
\label
{
nvram
}
...
...
编辑
预览
Markdown
is supported
0%
请重试
或
添加新附件
.
添加附件
取消
You are about to add
0
people
to the discussion. Proceed with caution.
先完成此消息的编辑!
取消
想要评论请
注册
或
登录