@@ -474,6 +474,25 @@ version. This is how we can achieve that.
474474 version: 2022-08-31_cbff21b
475475 ` ` `
476476
477+ # # Verify Intel Boot Guard key
478+
479+ It' s possible to verify which keys currently running firmware is signed with:
480+
481+ 1. Enter the shell in DTS
482+
483+ 1. Execute `btg_key_validator`
484+
485+ Example output:
486+
487+ ```bash
488+ Reading flash...
489+ Extracting key manifest...
490+ Key matches NovaCustom Meteor Lake signing key.
491+ ```
492+
493+ The script will output information whether the platform firmware is signed with
494+ the correct Intel Boot Guard key.
495+
477496## Additional features
478497
479498The section below presents a list of functionalities added to DTS, which were
@@ -552,22 +571,3 @@ v1.2.20, pending the resolution of this issue. We will reintroduce them once we
552571determine the appropriate action to address this dependency. Progress on this
553572matter is being monitored through issue
554573[288](https://github.com/Dasharo/dasharo-issues/issues/288).
555-
556- ### Verify Intel Boot Guard key
557-
558- It' s possible to verify which keys currently running firmware is signed with:
559-
560- 1. Enter the shell in DTS
561-
562- 1. Execute ` btg_key_validator`
563-
564- Example output:
565-
566- ` ` ` bash
567- Reading flash...
568- Extracting key manifest...
569- Key matches NovaCustom Meteor Lake signing key.
570- ` ` `
571-
572- The script will output information whether the platform firmware is signed with
573- the correct Intel Boot Guard key.
0 commit comments