From c3b5af63d1cb9bf5ebcfe04c1fe9880edb62bcac Mon Sep 17 00:00:00 2001 From: Masahisa Kojima Date: Sun, 20 Nov 2022 09:21:18 +0900 Subject: eficonfig: add UEFI Secure Boot Key enrollment interface This commit adds the menu-driven UEFI Secure Boot Key enrollment interface. User can enroll PK, KEK, db and dbx by selecting file. Only the signed EFI Signature List(s) with an authenticated header, typically '.auth' file, is accepted. To clear the PK, KEK, db and dbx, user needs to enroll the null key signed by PK or KEK. Signed-off-by: Masahisa Kojima Reviewed-by: Ilias Apalodimas --- cmd/Makefile | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'cmd/Makefile') diff --git a/cmd/Makefile b/cmd/Makefile index 2444d116c07..0b6a96c1d91 100644 --- a/cmd/Makefile +++ b/cmd/Makefile @@ -66,6 +66,11 @@ obj-$(CONFIG_CMD_EEPROM) += eeprom.o obj-$(CONFIG_EFI) += efi.o obj-$(CONFIG_CMD_EFIDEBUG) += efidebug.o obj-$(CONFIG_CMD_EFICONFIG) += eficonfig.o +ifdef CONFIG_CMD_EFICONFIG +ifdef CONFIG_EFI_MM_COMM_TEE +obj-$(CONFIG_EFI_SECURE_BOOT) += eficonfig_sbkey.o +endif +endif obj-$(CONFIG_CMD_ELF) += elf.o obj-$(CONFIG_CMD_EROFS) += erofs.o obj-$(CONFIG_HUSH_PARSER) += exit.o -- cgit v1.3.1