From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received-SPF: Pass (sender SPF authorized) identity=mailfrom; client-ip=2a00:1450:400c:c0c::22c; helo=mail-wr0-x22c.google.com; envelope-from=dmitry.mityugov@gmail.com; receiver=edk2-devel@lists.01.org Received: from mail-wr0-x22c.google.com (mail-wr0-x22c.google.com [IPv6:2a00:1450:400c:c0c::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ml01.01.org (Postfix) with ESMTPS id 5F3022215BD96 for ; Mon, 5 Feb 2018 06:08:25 -0800 (PST) Received: by mail-wr0-x22c.google.com with SMTP id 35so2886576wrb.13 for ; Mon, 05 Feb 2018 06:14:07 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=AkaV20P7f8WZs6VGbhg7Gs8fNsZz/69VvN0mnl8uyCU=; b=gFelOvcXooWxaA2HDBwUhGMJHk5s8mqsygcDc0F2hkX57/XasNDr2hf6d8214ZE202 j2Lk8oQX8MiKt+XIcpCmAA61jl4b3qJYuM5xuRoMliXFHsShc/SONnvee1zva425gVUF xXXlGdnIeS7SwBrkRDfggaoFongtErgnuk2Vt+r/px5Iy6r20pHK/Hn1X4BzFb/ULgGi pvleV7Em3dWsuSMWY0znVIVgPvy1WHicJSCl1ufp3h49qBYRmBDzAkP8Ei9a55H+m3lR Vs5J/9pQ3r1L/X1t8p2qM9VQnPPvJeurUiRCJsIBoi5i8sdVWDk77Nhv9j3UT6Pf8ihv TyHQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=AkaV20P7f8WZs6VGbhg7Gs8fNsZz/69VvN0mnl8uyCU=; b=o+D7y6+B/FGiUfnylFfqdBkXabE+LCiiKPs0hGuFASdDphMMP2O0FGhPWZ6DqIZpgI Q/m8vf7sB76+CibYEB4suwYbSOxYiRHikHHZ/mGCkxJihqmAp85EtmWLLzBYAYUWvF1/ fDSqj5TKHyLTU6lIsPGHWwinPhpQ1C19r4P3K6zDP5nbH8FnlB0dFy5y/mXWGLnIO30k g34ftXUEM7tOQt6yoP4IRBUt5dX7NcjEwrGzjjSW8SzbZNJAosYNEXtb1aDK1MVBK6Hi 3VXugA8aGiWL18ppFSE70as8WuAD5QiFE7+HJ7dAhPhafUekFOLMCQfnX3KV3Jjcg/Rx B1Pg== X-Gm-Message-State: AKwxyteY75J8twJ41xLN+ruk1WnEifdWoBDHi5ME5HSJUHehVyTAip9W vWxo2bRbLrmE5L++sYbiFGXHU8k8JL6mNXmNW/40KA== X-Google-Smtp-Source: AH8x224oGP/YFseQTkFxBWqkFhifvkEYW27tXoswp4cPkEQ7VmSfb0dyuVoFRDsnS9gXDOUjpncqhmXW+ktnSgEcses= X-Received: by 10.223.195.201 with SMTP id d9mr39805712wrg.134.1517840044300; Mon, 05 Feb 2018 06:14:04 -0800 (PST) MIME-Version: 1.0 Received: by 10.28.185.19 with HTTP; Mon, 5 Feb 2018 06:14:03 -0800 (PST) From: Dmitry Mityugov Date: Mon, 5 Feb 2018 17:14:03 +0300 Message-ID: To: edk2-devel@lists.01.org X-Mailman-Approved-At: Mon, 05 Feb 2018 06:26:44 -0800 X-Content-Filtered-By: Mailman/MimeDel 2.1.23 Subject: change keys in a ..._VARS.fd file programmatically (SecureBoot enabled) X-BeenThere: edk2-devel@lists.01.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: EDK II Development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Feb 2018 14:08:25 -0000 Content-Type: text/plain; charset="UTF-8" Hi, Could you please let me know if it possible to automate changing keys in a ..._VARS.fd when SecureBoot is enabled? I understand that I can go into the UEFI shell and change them there manually, but I'm looking for a way to add/replace/delete them from my program before a KVM VM is started. I've found an email in this list with a similar question, https://lists.01.org/pipermail/edk2-devel/2017-August/012995.html , but I'm not sure if the answer is still valid, or if any new possibilities have arosen since then. There are also some home-made editors for the vars, like http://git.annexia.org/?p=virt-efivars.git;a=summary . Should I go this way in my adventure? Thank you in advance for any insight on this subject -- Dmitry