Em qua., 9 de jul. de 2025 às 13:21, Alexander F. Lent <lx@xxxxxxxxxxxxxx> escreveu: > > Hi Michael, Chris, and devel folks, > > On Wed, Jul 9, 2025, 11:16 Michael Cronenworth <mike@xxxxxxxxxx> wrote: >> >> On 7/9/25 9:51 AM, Chris Adams wrote: >> > How can I tell what my systems have (ideally from within Linux)? >> >> There might be a better way, but I used "efivar" from the package with the same name. > > > I usually use mokutil to list keys: (it should be installed by default) > > $ mokutil -l --kek > $ mokutil -l --db > Tested this on my Dell laptop and got this: ``` $ mokutil -l --kek d4884608ae Dell Inc. Key Exchange Key 31590bfd89 Microsoft Corporation KEK CA 2011 $ mokutil -l --db 15254b199b Dell Inc. UEFI DB 46def63b5c Microsoft Corporation UEFI CA 2011 580a6f4cc4 Microsoft Windows Production PCA 2011 ``` I assume that since the last BIOS update available for me (and currently installed) is from November 2023, there's some chance Dell might ship a new BIOS version with the new certificate. I wouldn't count on it though and I probably should wait for fwupd to be able to add the new CA to my system. > To see all UEFI keys, databases and MOKs: > > $ mokutil -l -a > There's interesting stuff here, like the Fedora CA and the akmods keys. The only other interesting thing however is the Dell Platform Key I mentioned earlier. > For more detailed results: > > $ mokutil -l -a --verbose-listing > > Best, > Alexander F. Lent <lx@xxxxxxxxxxxxxx> > -- > _______________________________________________ > devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx > To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx > Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx > Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue -- _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
