systemd/man/uki.conf.example

[UKI]
SecureBootPrivateKey=/etc/kernel/secure-boot-key.pem
SecureBootCertificate=/etc/kernel/secure-boot-certificate.pem

[PCRSignature:initrd]
Phases=enter-initrd
PCRPrivateKey=/etc/systemd/tpm2-pcr-private-key-initrd.pem
PCRPublicKey=/etc/systemd/tpm2-pcr-public-key-initrd.pem

[PCRSignature:system]
Phases=enter-initrd:leave-initrd enter-initrd:leave-initrd:sysinit
       enter-initrd:leave-initrd:sysinit:ready
PCRPrivateKey=/etc/systemd/tpm2-pcr-private-key-system.pem
PCRPublicKey=/etc/systemd/tpm2-pcr-public-key-system.pem
man: add example how to configure automatic signing Fixes #978. 2023-06-06 21:31:17 +02:00			`[UKI]`
man: update PCR and Secure Boot key names and paths (cherry picked from commit dbf5b09de40a9d22b67611524bea12feae657462) 2024-09-11 20:18:26 +02:00			`SecureBootPrivateKey=/etc/kernel/secure-boot-key.pem`
			`SecureBootCertificate=/etc/kernel/secure-boot-certificate.pem`
man: add example how to configure automatic signing Fixes #978. 2023-06-06 21:31:17 +02:00
			`[PCRSignature:initrd]`
			`Phases=enter-initrd`
man: update PCR and Secure Boot key names and paths (cherry picked from commit dbf5b09de40a9d22b67611524bea12feae657462) 2024-09-11 20:18:26 +02:00			`PCRPrivateKey=/etc/systemd/tpm2-pcr-private-key-initrd.pem`
			`PCRPublicKey=/etc/systemd/tpm2-pcr-public-key-initrd.pem`
man: add example how to configure automatic signing Fixes #978. 2023-06-06 21:31:17 +02:00
			`[PCRSignature:system]`
			`Phases=enter-initrd:leave-initrd enter-initrd:leave-initrd:sysinit`
			`enter-initrd:leave-initrd:sysinit:ready`
man: update PCR and Secure Boot key names and paths (cherry picked from commit dbf5b09de40a9d22b67611524bea12feae657462) 2024-09-11 20:18:26 +02:00			`PCRPrivateKey=/etc/systemd/tpm2-pcr-private-key-system.pem`
			`PCRPublicKey=/etc/systemd/tpm2-pcr-public-key-system.pem`