Re: Signed EFI files ?

[address@hidden]

2012/11/22 Andrey Borzenkov <address@hidden>:
> В Thu, 22 Nov 2012 01:29:06 +0100
> "address@hidden" <address@hidden> пишет:
>
>> Dear all,
>>
>> - When installing grub-efi (2.00), does it install signed EFI files by
>> default when possible?
>>
>
> No. Private keys used to sign binaries are what they are - private.
> Even assuming those keys were available, distributing them with grub2
> sources would effectively invalidate them.
>
>> - I saw some computers with both grubx64.efi and shimx64.efi files, i
>> guess the shimx64.efi file is signed but not the grubx64.efi one, am i
>> correct?
>>
>
> Yes. Out of curiosity - which system is it? As far as I know LF shim is
> still not available.

Thank you Andrey. The system was Ubuntu 12.10.

Regards
Yann