Doing secure boot properly is kind of difficult. There are a bunch of TPM measur... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		ahepp 30 days ago \| parent \| context \| favorite \| on: Lennart Poettering, Christian Brauner founded a ne... Doing secure boot properly is kind of difficult. There are a bunch of TPM measurement registers for various bits and bobs (kernel, initramfs, cmdline, lots more). Using UKIs simplifies it a lot, but it’s not trivial to do right at the moment.

Nextgrid 30 days ago [–]

Secure Boot and TPM are separate things. The current Secure Boot policy gets measured by the TPM but that's about it.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact