<html>
<head>
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Hi Tamas,</p>
<p>do you have a link or tutorial how you did create the keys and
add it to your efi?</p>
<p>Tfh!</p>
<p>Oliver<br>
</p>
<br>
<div class="moz-cite-prefix">On 27.09.2018 09:06, Tamas
Baumgartner-Kis wrote:<br>
</div>
<blockquote type="cite"
cite="mid:20180927070632.7ksdsswiuz2oy7da@hermes.ruf.uni-freiburg.de">Hi,
<br>
<br>
I'm wondering how ipxe handles image loading with uefi secure boot
enabled.
<br>
<br>
I have my own uefi secure boot keys (so no microsoft keys).
<br>
<br>
When I sign ipxe with my own key everything is ok and I'm able to
boot ipxe over the network and uefi secure boot isn't complaining.
<br>
If I boot from ipxe a uefi_shell.efi signed with my key the shell
is loading fine
<br>
and again uefi secure boot is satisfied.
<br>
<br>
But if I boot a kernel signed with my key ipxe stops to execute
the kernel with following error:
<br>
<br>
Could not boot image: Exec format error (<a class="moz-txt-link-freetext" href="http://ipxe.org/2e008081">http://ipxe.org/2e008081</a>)
<br>
<br>
Kind regards
<br>
Tamas Baumgartner-Kis
<br>
<br>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
ipxe-devel mailing list
<a class="moz-txt-link-abbreviated" href="mailto:ipxe-devel@lists.ipxe.org">ipxe-devel@lists.ipxe.org</a>
<a class="moz-txt-link-freetext" href="https://lists.ipxe.org/mailman/listinfo.cgi/ipxe-devel">https://lists.ipxe.org/mailman/listinfo.cgi/ipxe-devel</a>
</pre>
</blockquote>
<br>
</body>
</html>