Repository navigation
9B release: bump bootmgfw svn to v11 - #469
Merged
Merged
Conversation
SochiOgbuanya
approved these changes
Sep 9, 2026
|
October 2026 CU is now at BootMgr SVN 12.0. This approval process needs to work faster. |
Collaborator
Author
|
garlin (@garlin-cant-code) looks like its the 2 reviewer policy, will work on getting this and the latest released update in |
Jordan Geurten (jgeurten)
approved these changes
Oct 13, 2026
Jörgen (wthrbtn)
added a commit
to air-gapped/skills
that referenced
this pull request
Oct 27, 2026
… not absent or total Classification: version-drift Source: microsoft/secureboot_objects#448 (2026-09-01, split dbx into SignedByKEK2023/ and SignedByKEK2011/) microsoft/secureboot_objects#469 + release v1.7.1 (2026-10-20): KEK-2011 SVN file "has bootmgr v11 SVN"; KEK-2023 dbx_SVN.efiauth2 "has all the latest SVN values (bootmgr v11, cdboot v3, wdsmgfw v3)" microsoft/secureboot_objects#479 (2026-10-20, 2011-signed bootmgfw v12 SVN still published) microsoft/secureboot_objects#468 (old DBX/<arch>/ paths restored, deleted in 2027) Signer of each tree read from the payload bytes: SignedByKEK2011 files chain to KEK CA 2011, SignedByKEK2023 files to KEK 2K CA 2023. Before: SKILL.md — freeze "now live": a 2011-KEK machine "can't receive new dbx revocations"; mechanism.md and gotchas-and-decisions.md — freeze "not yet started" (three files, two contradictory states) After: all three — partial: new hashes and bootmgr SVN still ship 2011-signed; cdboot/wdsmgfw SVN ship 2023-signed only. mechanism.md gains the three-path table so an agent applies the right tree. Backlog watch item re-aimed at the end of 2011-signed dbx. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Keeping old DBXUpdateSVN.bin for backwards compat despite it now being insufficient, and adding 3 files: