To read all comments associated with this story, please click here.
Depends on your OEM still providing updates. justSomeGuy.
Its the number 1 step to load the bootloader latter on in the process there are some internet links.
The Platform Key is OEM hardware makers that protects the KEK that contains the OS bootloader and other need firmware parts that are approved.
Key issues here the power of updating the KEK goes to the hands of the Hardware maker.
So yes they can bust things. Allowed in KEK contain approved signing keys for bootloaders.
So yes Microsoft needs to update there signing key Hardware maker decides only to update on todays hardware. People get a service pack update that changes the boot loader their computer dies because UEFI no longer will load the Windows loader.
This is a god darn land mine. Customer needs to have the means to insert and remove allowed keys and see the allowed keys.
Change able as long as hardware maker is supporting the hardware you have. Reason why I said 5 years then screwed.
Other issue is black list. Disallowed malware hashes those should be inspect-able as well.




Member since:
2011-08-30
I've done a little searching but haven't found this.
One of the pictures from the article implies some sort of key revocation scheme.
Anyone know if this is supposed to be over the internet, a la AACS, or if it is done at the time of manufacture, and is then unchangeable?
Thanks.