I have yet to see a firmware that doesn't allow me to enroll private keys. It's a basic UEFI features, and IIRC Microsoft requires that to be possible for intel hardware: if you don't, no Windows.
When you control the keys, SecureBoot is a good thing at least as good as encryption!
There are things that are fair to complain about, but on this, I don't see how Microsoft or anyone could have done any better to be playing nice with Linux while helping customers.
Re:The PS5 Has Been Jailbroken
by matheusmoreira on Monday October 03, 2022 @04:41PM
(#33073395)
> I have yet to see a firmware that doesn't allow me to enroll private keys.
I have computers that don't have this feature.
> When you control the keys, SecureBoot is a good thing at least as good as encryption!
I agree. It's all about who owns the keys to the machine. If we do, then it's all good.
Not always possible. Depends on firmware support and we all know how shitty proprietary firmware can be.