Messages in this thread | | | From | Florian Weimer <> | Subject | Re: [GIT PULL] Load keys from signed PE binaries | Date | Tue, 26 Feb 2013 22:40:02 +0100 |
| |
* Chris Friesen:
> On 02/25/2013 10:14 AM, Matthew Garrett wrote: >> Windows 8 will not load unsigned drivers if Secure Boot is enabled. > > For reference: > > http://msdn.microsoft.com/en-us/library/windows/desktop/hh848062%28v=vs.85%29.aspx
Thanks. Do you know perchance of any other Microsoft documentation in this area, that is, their PKI architecture, the signing and revocation policies, or even security objectives for the Secure Boot implementation?
The Windows 8 logo requirements are pretty thin on this and only specify the "Microsoft Windows Production PCA 2011" (which is used to sign the Windows boot loader). Policy-wise, I've seen very little published information (most of it is hearsay), and as to the objectives, I'm really in the dark.
| |