Skip to content

Conversation

@mkopec
Copy link
Member

@mkopec mkopec commented Dec 9, 2025

Rejects updating via Capsule Update if BtG is enabled and the updated image does not have the same OEM Root Key in the key manifest.

ref: ncm-2095

@mkopec mkopec marked this pull request as draft December 9, 2025 10:04
…ey compatibility

Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
@mkopec mkopec force-pushed the btg_check branch 6 times, most recently from fe44a52 to 3b4672f Compare December 9, 2025 13:32
@mkopec mkopec marked this pull request as ready for review December 9, 2025 13:33
Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
…edundant debug print

Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
Copy link
Member

@SergiiDmytruk SergiiDmytruk left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Came back after looking at coreboot changes.

…style

Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
…line

Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
…STS6 bit 30

Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
…tG key fail message

Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
…OemRootKey

Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
… Flashing.c

Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
…if descriptor is unlocked

Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
@mkopec mkopec force-pushed the btg_check branch 10 times, most recently from 2a9ee67 to 6b73897 Compare December 17, 2025 15:27
… don't match FPF

Show a 2x scaled popup on the screen to inform the user what's happened
and what to do in this situation. Print some debug info to the screen to
provide to developers.

Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
Copy link
Member

@SergiiDmytruk SergiiDmytruk left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

A few things to fix. Haven't tested the dialog yet, will also need to go through its implementation in more detail.

Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
…ee string literal

Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
…iadic arguments with va_copy

Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
…0s timer remnants

Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
…ize popup scaling factor

Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
…cale factor based on resolution

Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
…imer event

Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
… key is hashed

Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
@mkopec
Copy link
Member Author

mkopec commented Dec 17, 2025

Looks like this:
image

…opup to fit 800x600

Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
…ing calculations

Signed-off-by: Michał Kopeć <michal.kopec@3mdeb.com>
Copy link
Member

@SergiiDmytruk SergiiDmytruk left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, just one question to be sure we've thought about all cases here.

@SergiiDmytruk SergiiDmytruk merged commit de7e555 into dasharo Dec 18, 2025
2 checks passed
@SergiiDmytruk SergiiDmytruk deleted the btg_check branch December 18, 2025 18:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants