Deploying Secure Boot: Key Creation and Management

Key Deployment Process
9
Create Platform
Key (PK) and
Secure FW Update
Key
Create PK Backup
(Recommended)
Add KEK (w/db,
dbx)and sign with
PKpri
Add Secure Update
Key (pub)
Enroll PKpub
Protect PKpri and
Secure Update (pri)
Ensure Network
and Physical
Security
Manage and refine
security practices
Done?
(Never really)
UEFI Summer Summit – July 2012 www.uefi.org