linuxboot / linuxboot/heads-wiki

Review Bootguard section stating only librems come with unfused keys, refer to vendors page, refer to leaked MSI bootguard private key

Open
#173 3 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
No language data
Stars
96
Forks
58
Avg merge
1d 16h
Merged PRs (30d)
11

Description

From https://osresearch.net/Keys/#management-engine-and-bootguard-acm-fuses :
> The x230 Thinkpads do not support bootguard and only the Librem laptops ship with unfused keys.

This is not true anymore and for a little while with NovaCustom buying Clevo in bulk with unfused bootguard, see reviewed https://osresearch.net/Vendors/

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Open the Keys page at the cited management-engine and Bootguard ACM fuses section, then compare its claim with the linked Vendors page. Update the outdated Librem-only statement to reflect the NovaCustom/Clevo case and add the requested vendor and leaked MSI Bootguard private-key references; verify the links and wording when done.

Written by the indexing model from the issue text.

Assessment

Domain
documentation, security
Issue type
Documentation
Difficulty
1/5
Estimated time
Under an hour
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
52/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.