News for hackers. Stuff that matters.

A comment on Linux and Secure Boot certificate expiration. Parent comment

Re:Linux and Secure Boot certificate expiration by preisschild on Friday July 18, 2025 @07:49AM (#44603673)
> Who controls the fucking certs?

You can? Delete the default (ie Windows certs) and import your own.

[ Parent | on HN ]
Re:Linux and Secure Boot certificate expiration by m4rtink on Friday July 18, 2025 @08:20AM (#44603897)
I think it is only required on x86 EFI machines due to some old antitrust rulings. Provided the firmware vendor actually implements it right.

On ARM for example the hardware, including some hardware shipping with ARM version of Windows, does not need to provide the option to add custom certs and remove existing ones, so AFAIK in most cases it is not possible.

[ Parent | on HN ]
Re:Linux and Secure Boot certificate expiration by preisschild on Monday July 21, 2025 @05:14AM (#44633200)
I think you can do the same in the Tianocore EDK2 ARM UEFI

But yeah, many ARM boards don't use open UEFI firmware

[ Parent | on HN ]