github/acrn-hypervisor
1
0
Fork 0
mirror of https://github.com/projectacrn/acrn-hypervisor.git synced 2025-06-19 20:22:46 +00:00
Code Issues Projects Releases Wiki Activity

doc: review edit for enable_laag_secure_boot

Browse Source 
Review update to PR #3938

Signed-off-by: David B. Kinder <david.b.kinder@intel.com>
This commit is contained in:
David B. Kinder 2019-11-08 10:52:56 -08:00 committed by David Kinder
parent 38abceb761
commit 2d810ea456
1 changed files with 16 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
doc/tutorials/enable_laag_secure_boot.rst
View File

@ -36,7 +36,7 @@ Generate keys
For formal case, key generation and management can be referenced by:
`Ubuntu-KeyGeneration`_ or `Windows-secure-boot-key-creation-and-management-guidance`_.
For testing, the keys can be created on the KBL NUC by below commands:
For testing, the keys can be created on the KBL NUC with these commands:
.. code-block:: none
@ -59,7 +59,8 @@ The keys to sign bootloader or kernel: **db.key**, **db.crt**
Create virtual disk to hold the keys
====================================
Follow below commands to create virtual disk and copy keys:
Follow these commands to create a virtual disk and copy the keys
generated above:
.. code-block:: none
@ -76,8 +77,8 @@ Follow below commands to create virtual disk and copy keys:
Enroll keys in OVMF
===================
#. Customize the ``launch_uos.sh`` script to boot with the virtual disk which
contains the keys for enrollment:
#. Customize the ``launch_uos.sh`` script to boot with the virtual disk
that contains the keys for enrollment:
.. code-block:: none
:emphasize-lines: 6,7,9
@ -235,7 +236,7 @@ Follow these commands to sign the Clear Linux VM binaries.
Boot Clear Linux signed image
*****************************
#. Modify the ``launch_uos.sh`` script to use signed image.
#. Modify the ``launch_uos.sh`` script to use the signed image.
.. code-block:: none
:emphasize-lines: 5,6,8
@ -265,9 +266,11 @@ Boot Clear Linux signed image
#. Type ``exit`` to enter Bios configuration.
#. Navigate to the **Boot Manager** and select **UEFI Misc Device** to boot signed Clear Linux image.
#. Navigate to the **Boot Manager** and select **UEFI Misc Device** to
boot the signed Clear Linux image.
#. Log in as root and use ``dmesg`` to check the secure boot status on User VM.
#. Login as root and use ``dmesg`` to check the secure boot status on
the User VM.
.. code-block:: none
:emphasize-lines: 2