xref: /haiku/data/boot/efi/keys/README.md (revision 75438cceda840dc37a25a04d8e38de28318022a2)
1# Haiku UEFI Keys
2
3The EFI keys in this directory can be used to boot Haiku in UEFI Secure Mode.
4The Haiku, Inc. key must be appended to your EFI BIOS trusted keychain to function.
5
6> This is only needed when you're booting in EFI Secure Boot mode! It's probably
7> easier to disable EFI Secure Boot in most cases.
8
9## Installing UEFI Keys
10
11To trust Haiku's EFI bootloader, you'll need to append our DB key to your BIOS's
12DB keychain.
13
14> Ensure the Haiku installation media is inserted / plugged into your computer.
15
16Real world examples:
17
18* Dell XPS 13 Laptop (Dell BIOS)
19  * Boot laptop, press F2 to enter BIOS
20  * Settings -> Secure Boot -> Secure Boot Enable
21    * Verify Secure Boot is enabled, otherwise this does nothing.
22  * Settings -> Secure Boot -> Expert Key Management
23    * "Enable Custom Mode" checked
24    * Press "Reset All Keys"
25    * Choose db, then press "Append from File"
26    * Navigate to the Haiku USB installation media
27    * EFI -> KEYS -> DB.auth
28
29* Framework Laptop (InsydeH20 BIOS)
30  * Boot laptop, press F2 to enter BIOS
31  * Security -> Secure Boot
32  * Enforce Secure Boot enabled
33  * DB Options -> Enroll Signature -> PKCS7
34  * Haiku ESP -> KEYS -> DB.cer
35  * (you can leave the "Owner_GUID" blank)
36  * Enroll DB.cer -> Yes
37  * F10, Save and Exit
38