16.1 (2025-11-07)

Based on upstream shim-16.1

(Updated on 2026-05-27 to include shim binaries dual-signed with both 2011 and 2023 certificates, and MokManager binaries.)

Included changes

• ipxe: Use iPXE Secure Boot CA certificate as vendor certificate
• ipxe: Add documentation
• ipxe: Allow next loader path to be derived from shim path
• ipxe: Add vendor SBAT data
• ipxe: Set "ipxe.efi" as default loader binary name
• ipxe: Use iPXE code-signing certificate as vendor certificate
• ipxe: Add GitHub workflow to build x64 and aa64 binaries

Downloads

• ipxe-shimx64.efi (x86_64)
• ipxe-shimaa64.efi (aarch64)

Additional downloads

• mmx64.efi (x86_64 MokManager)
• mmaa64.efi (aarch64 MokManager)