github/acrn-hypervisor
1
0
Fork 0
mirror of https://github.com/projectacrn/acrn-hypervisor.git synced 2025-08-20 01:02:36 +00:00
Code Issues Projects Releases Wiki Activity

doc:add more explanation on parameter --windows

Browse Source 
acrn-dm --windows parameter is used for specify
the Windows ORACLE virtio device driver,which is
used when enable secure boot in Windows, otherwise
the default REDHAT virtio device driver will be
used which is not certified by Microsoft

Signed-off-by: Liu, Hang1 <hang1.liu@intel.com>
Signed-off-by: David B. Kinder <david.b.kinder@intel.com>
This commit is contained in:
Liu, Hang1 2021-08-12 17:01:11 +08:00 committed by David Kinder
parent 4c04857681
commit 1f5a7e8b8d
2 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
doc/tutorials/using_windows_as_uos.rst
View File

@ -292,6 +292,9 @@ Explanation for acrn-dm Popular Command Lines
* ``--ovmf /home/acrn/work/OVMF.fd``: * ``--ovmf /home/acrn/work/OVMF.fd``:
Make sure it points to your OVMF binary path. Make sure it points to your OVMF binary path.
* ``--windows``:
Specify this to use the Windows ORACLE virtio device when enabling secure boot in Windows; otherwise, the REDHAT virtio device will be used.
Secure Boot Enabling Secure Boot Enabling
******************** ********************
Refer to the steps in :ref:`How-to-enable-secure-boot-for-windows` for Refer to the steps in :ref:`How-to-enable-secure-boot-for-windows` for

6
doc/tutorials/waag-secure-boot.rst
View File

@ -571,9 +571,11 @@ to import PK, KEK, and DB into OVMF, Ubuntu 16.04 used.
Notes: Notes:
1. According to Microsoft documentation, after enabling secure boot, kernel 1. According to Microsoft documentation, after enabling secure boot, the kernel
mode driver must be signed by a trusted certification authority mode driver must be signed by a trusted certification authority
(CA). (CA). Specify the acrn-dm parameter ``--windows`` to use the Windows
ORACLE virtio device driver. The default REDHAT virtio device driver is
not signed and may lead to problems in the secure boot process.
2. A cross-signed driver using a SHA-1 or SHA-256 certificate issued 2. A cross-signed driver using a SHA-1 or SHA-256 certificate issued
after July 29th, 2015 is not recommended for Windows 10. after July 29th, 2015 is not recommended for Windows 10.