• @[email protected]
    link
    fedilink
    English
    54 months ago

    And technically you can whitelist other certificates, too, but I have no idea how you might do that.

    When you enter the UEFI somewhere there will be a Secure Boot section, there there is usually a way to either disable Secure Boot or to change it into “Setup Mode”. This “Setup Mode” allows enrolling new keys, I don’t know of any programs on Windows that can do it, but sbctl can do it and the systemd-boot bootloader both can enroll your own custom keys.