Re: [pve-devel] [PATCH-SERIES qemu-server/manager/docs v3 0/3] improve Microsoft+Windows UEFI CA 2023 enrollment

[Fiona Ebner <f.ebner@proxmox.com>]

Am 05.02.26 um 1:11 PM schrieb Fiona Ebner:
> Am 21.01.26 um 4:44 PM schrieb Fiona Ebner:
>> Changes in v3:
>> * drop already applied patches
>> * squash ui patches
>> * add additional newline in confirm dialog to better separate subject
>>   from note
>> * move enrollment to Disk Actions menu
>> * also suggest and support enrollment for non-Windows guests (Linux
>>   distro shims are also signed with the Microsoft KEK)
>> * add docs patch
>>
>> Changes in v2:
>> * add patch to also enroll the Windows UEFI CA 2023
>> * improve readability of change_drive() function
>> * ui: add more context to confirmation dialog
>> * add patch introducing a '2023w' marker so that drives already
>>   enrolled with only the MS 2023 cert can still be detected as needing
>>   enrollment
>>
>> Make it possible to enroll via the API and UI by setting the
>> ms-cert=2023w marker on the EFI disk.
>>
>> The previous Microsoft UEFI CA 2011 will expire in June 2026, and the
>> previous Windows UEFI CA 2011 will expire in October 2026, so there
>> should be a way to update that can be automated and done while guests
>> are running.
>>
>> pve-manager needs a dependency bump for qemu-server for the API call
>> to have the desired effect (or the marker will just get set without
>> actually enrolling).
> 
> Ping

Ping