38 lines
1.2 KiB
Markdown
38 lines
1.2 KiB
Markdown
|
# Haiku UEFI Keys
|
||
|
|
|
||
|
|
The EFI keys in this directory can be used to boot Haiku in UEFI Secure Mode.
|
||
|
|
The Haiku, Inc. key must be appended to your EFI BIOS trusted keychain to function.
|
||
|
|
|
||
|
|
> This is only needed when you're booting in EFI Secure Boot mode! It's probably
|
||
|
|
> easier to disable EFI Secure Boot in most cases.
|
||
|
|
|
||
|
|
## Installing UEFI Keys
|
||
|
|
|
||
|
|
To trust Haiku's EFI bootloader, you'll need to append our DB key to your BIOS's
|
||
|
|
DB keychain.
|
||
|
|
|
||
|
|
> Ensure the Haiku installation media is inserted / plugged into your computer.
|
||
|
|
|
||
|
|
Real world examples:
|
||
|
|
|
||
|
|
* Dell XPS 13 Laptop (Dell BIOS)
|
||
|
|
* Boot laptop, press F2 to enter BIOS
|
||
|
|
* Settings -> Secure Boot -> Secure Boot Enable
|
||
|
|
* Verify Secure Boot is enabled, otherwise this does nothing.
|
||
|
|
* Settings -> Secure Boot -> Expert Key Management
|
||
|
|
* "Enable Custom Mode" checked
|
||
|
|
* Press "Reset All Keys"
|
||
|
|
* Choose db, then press "Append from File"
|
||
|
|
* Navigate to the Haiku USB installation media
|
||
|
|
* EFI -> KEYS -> DB.auth
|
||
|
|
|
||
|
|
* Framework Laptop (InsydeH20 BIOS)
|
||
|
|
* Boot laptop, press F2 to enter BIOS
|
||
|
|
* Security -> Secure Boot
|
||
|
|
* Enforce Secure Boot enabled
|
||
|
|
* DB Options -> Enroll Signature -> PKCS7
|
||
|
|
* Haiku ESP -> KEYS -> DB.cer
|
||
|
|
* (you can leave the "Owner_GUID" blank)
|
||
|
|
* Enroll DB.cer -> Yes
|
||
|
|
* F10, Save and Exit
|