diff options
| author | sommerfeld <sommerfeld@sommerfeld.dev> | 2026-09-30 08:54:59 +0100 |
|---|---|---|
| committer | sommerfeld <sommerfeld@sommerfeld.dev> | 2026-09-30 08:54:59 +0100 |
| commit | 6739045b173cc1be1f46bdf4b6167cbf9a883089 (patch) | |
| tree | 955161ee64eba8d06cf1492b8c903bae76b967b6 /etc | |
| parent | c6cf3bc7e20e43c61b48d417b9291e5d7d115b1d (diff) | |
| download | dotfiles-6739045b173cc1be1f46bdf4b6167cbf9a883089.tar.gz dotfiles-6739045b173cc1be1f46bdf4b6167cbf9a883089.tar.bz2 dotfiles-6739045b173cc1be1f46bdf4b6167cbf9a883089.zip | |
Require signed PCR 11 policy for TPM root unlock
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/kernel/uki.conf | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/etc/kernel/uki.conf b/etc/kernel/uki.conf index 82b7801..5417a7a 100644 --- a/etc/kernel/uki.conf +++ b/etc/kernel/uki.conf @@ -7,3 +7,9 @@ PCRPrivateKey=/etc/systemd/tpm2-pcr-private-key.pem PCRPublicKey=/etc/systemd/tpm2-pcr-public-key.pem Phases=enter-initrd PolicyRef=initrd + +[PCRSignature:luks-root] +PCRPrivateKey=/etc/systemd/tpm2-pcr-private-key.pem +PCRPublicKey=/etc/systemd/tpm2-pcr-public-key.pem +Phases=enter-initrd +PolicyRef=luks-root |