From cf5729d4e184831d8d1a9bb3a83db9b645f96c24 Mon Sep 17 00:00:00 2001 From: kavsrf Date: Sun, 26 Feb 2017 10:48:24 +0300 Subject: Beta2 patch 1 Edit DcsProp and PlatformInfo from System->Settings EFI loader updated --- src/Boot/EFI/DcsCfg.efi | Bin 882656 -> 883104 bytes src/Boot/EFI/DcsCfg32.efi | Bin 764224 -> 764608 bytes src/Boot/EFI/DcsInt.efi | Bin 847200 -> 847712 bytes src/Boot/EFI/DcsInt32.efi | Bin 748160 -> 748480 bytes src/Boot/EFI/DcsRe.efi | Bin 18688 -> 18688 bytes src/Boot/EFI/DcsRe32.efi | Bin 14752 -> 14752 bytes src/Boot/EFI/Readme.txt | 9 ++++----- 7 files changed, 4 insertions(+), 5 deletions(-) (limited to 'src/Boot/EFI') diff --git a/src/Boot/EFI/DcsCfg.efi b/src/Boot/EFI/DcsCfg.efi index 7d69a534..d0641c15 100644 Binary files a/src/Boot/EFI/DcsCfg.efi and b/src/Boot/EFI/DcsCfg.efi differ diff --git a/src/Boot/EFI/DcsCfg32.efi b/src/Boot/EFI/DcsCfg32.efi index 4be6abc7..ef652c47 100644 Binary files a/src/Boot/EFI/DcsCfg32.efi and b/src/Boot/EFI/DcsCfg32.efi differ diff --git a/src/Boot/EFI/DcsInt.efi b/src/Boot/EFI/DcsInt.efi index 5759f3ff..8c6e4623 100644 Binary files a/src/Boot/EFI/DcsInt.efi and b/src/Boot/EFI/DcsInt.efi differ diff --git a/src/Boot/EFI/DcsInt32.efi b/src/Boot/EFI/DcsInt32.efi index c49afb10..2cb57b56 100644 Binary files a/src/Boot/EFI/DcsInt32.efi and b/src/Boot/EFI/DcsInt32.efi differ diff --git a/src/Boot/EFI/DcsRe.efi b/src/Boot/EFI/DcsRe.efi index ab7a387c..c5b6dd5a 100644 Binary files a/src/Boot/EFI/DcsRe.efi and b/src/Boot/EFI/DcsRe.efi differ diff --git a/src/Boot/EFI/DcsRe32.efi b/src/Boot/EFI/DcsRe32.efi index 7a4cb844..a31ba834 100644 Binary files a/src/Boot/EFI/DcsRe32.efi and b/src/Boot/EFI/DcsRe32.efi differ diff --git a/src/Boot/EFI/Readme.txt b/src/Boot/EFI/Readme.txt index f396b324..9ba94023 100644 --- a/src/Boot/EFI/Readme.txt +++ b/src/Boot/EFI/Readme.txt @@ -17,19 +17,18 @@ Here the steps to build VeraCrypt-DCS (Visual Studio 2010 SP1 should be installe * After the build is finished, EFI bootloader files will be present at edk2\Build\DcsPkg\RELEASE_VS2010x86\X64 Secure Boot: -In order to allow VeraCrypt EFI bootloader to run when EFI Secure Boot is enabled, VeraCrypt EFI bootloader files are signed -using a custom key whose public part can be loader into Secure Boot to allow the verification of VeraCrypt EFI files. +In order to allow VeraCrypt EFI bootloader to run when EFI Secure Boot is enabled, VeraCrypt EFI bootloader files are signed by custom key(DCS_sign) whose public part can be loaded into Secure Boot to allow verification of VeraCrypt EFI files. -below are instruction to update Secure Boot configuration: +to update Secure Boot configuration steps: 1. Enter BIOS configuration 2. Switch Secure boot to setup mode (or custom mode). It deletes PK (platform certificate) and allows to load DCS platform key. 3. Boot Windows 4. execute from admin command prompt - powershell -File sb_set_siglists.ps1 + powershell -ExecutionPolicy Bypass -File sb_set_siglists.ps1 It sets in PK (platform key) - DCS_platform It sets in KEK (key exchange key) - DCS_key_exchange It sets in db - DCS_sign MicWinProPCA2011_2011-10-19 MicCorUEFCA2011_2011-06-27 All DCS modules are protected by DCS_sign. All Windows modules are protected by MicWinProPCA2011_2011-10-19 -All SHIM(linux) modules are protected by MicCorUEFCA2011_2011-06-27 \ No newline at end of file +All SHIM(linux) modules are protected by MicCorUEFCA2011_2011-06-27 \ No newline at end of file -- cgit v1.2.3