hank-test/quick-docs
1
0
Fork 0
mirror of https://pagure.io/fedora-docs/quick-docs.git synced 2024-10-18 09:21:50 +00:00
Code Issues 1 Projects Releases Packages Wiki Activity Actions

Compare commits

base: hank-test:1111bc3f02e0a1c0d6aa1e89f0a5541ecd24554c
Branches Tags
hank-test:main
...
compare: hank-test:2ef04e43cfbaa82eed98d10626286482e9b78a1d
Branches Tags
hank-test:main

3 commits
1111bc3f02 ... 2ef04e43cf

Author SHA1 Message Date
hank L
2ef04e43cf Merge #744 Add security implications and key deletion sections to the MOK enrollment page 2024-08-30 08:38:11 +00:00
Jiri Eischmann
e6203dc63a Fixing a small oversight on the MOK enrollment page 2024-07-15 16:33:35 +02:00
Jiri Eischmann
7c3861e361 Adding information about security implications and key deletion to the MOK enrollment page 2024-07-15 16:30:14 +02:00
1 changed files with 14 additions and 0 deletions
Show stats Expand all files Collapse all files

14
modules/ROOT/pages/mok-enrollment.adoc
View file

@ -33,3 +33,17 @@ image:mok-util-05.png[mok-util-06.png,title="mokutil start screen"]
6. Select *Reboot* to reboot into the OS with the Nvidia drivers enabled.
image:mok-util-06.png[mok-util-07.png,title="Enroll the key(s) - Password"]
== Security Implications
Note that the enrolled machine owner key will be used to sign any future updates to the module or any other module you will decide to install and they will be implicitly trusted. All future updates will happen transparently with no interaction and/or authorization. Therefore, it's recommended to delete the machine owner key when it's no longer needed.
== Deleting Machine Owner Key
To delete the machine owner key, perform the following command in the terminal:
+
[subs="quotes"]
----
$ *sudo mokutil --delete /etc/pki/akmods/certs/public_key.der*
----