etc/kernel/uki.conf


1
2
3
4
5
6
7
8
9

[UKI]
PCRPKey=/etc/systemd/tpm2-pcr-public-key.pem
PCRBanks=sha256

[PCRSignature:initrd]
PCRPrivateKey=/etc/systemd/tpm2-pcr-private-key.pem
PCRPublicKey=/etc/systemd/tpm2-pcr-public-key.pem
Phases=enter-initrd
PolicyRef=initrd