Em qua., 9 de jul. de 2025, 09:06, Michael Catanzaro <mcatanzaro@xxxxxxxxxx> escreveu:
On Wed, Jul 9 2025 at 11:28:19 AM +02:00:00, Gerd Hoffmann
<kraxel@xxxxxxxxxx> wrote:
> Problem with that is not so much linux, but that a KEK update has
> never
> happened before so there are chances that bios vendors messed up
> things
> and updating the KEK doesn't work. Also not sure how good older
> hardware is covered.
I received a KEK update for my laptop just yesterday via GNOME
Software. Checking with 'fwupdmgr get-history' I can see the update
description: "This updates the UEFI Signature Database (the "KEK") to
the latest release from Microsoft, signed by LENOVO." Nice when things
just work.
But it's clearly a Thinkpad-specific update, so this does no good for
most of our users.
--
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
IMHO I believe there's no reason that Lenovo can't send the kek update to all UEFI and Secure Boot-supported devices regardless of whether those devices are normally lvfs supported. Same for Dell.
At least for me it seems to be a extremely generic update that doesn't rely on hardware specific characteristics as is with a full BIOS update.
---
Mateus Rodrigues Costa
-- _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
