- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi
We are building a secure bootloader that must be verified by Intel Boot Guard.
This document: "https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/resources/key-usage-in-integrated-firmware-images.html" says:
"Thus, Intel provides special tools to allow the OEM to specify their boot policy and public key hash value."
Where can I find these special tools?
Thanks
Link Copied
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello @Kgb,
Thank you for contacting Intel Embedded Community.
I think it is referring to the CSME package and the FIT tool to build the corresponding image.
You will need a Premier account in order to get access to the documentation.
Best regards,
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @Diego_INTEL
I have a premier account. I also note that the stitch tool from SBL says:
"This is an IFWI stitch config script for Slim Bootloader For the FIT tool and
In the reference code provided for the above purposes, Intel included documentation and examples for how to build the reference version of the firmware, including example keys to demonstrate the process. The documentation enumerated the process necessary to build a production level IFWI"

- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page