UEFI Boot Fix.

Ylianst · Aug 18, 2020 · fe7c54d · fe7c54d
1 parent 0a5e6ba
commit fe7c54d
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 2 deletions.
diff --git a/index.html b/index.html
@@ -4871,7 +4871,9 @@ <h4 style="width:100%;border-bottom:1px solid gray">Software KVM</h4>
                             stack.amtauth.uuidStr = guidToStr(stack.amtauth.UUID).toLowerCase();
 
                             var trustedCsmeRoots = [
-                                '3BA13766B1889DCB1E2D55BACCC9EC087452F78783E2EBAFD918FF4ED6ACC840' // www.intel.com / OnDie CA DEBUG Root Cert Signing CA
+                                '3BA13766B1889DCB1E2D55BACCC9EC087452F78783E2EBAFD918FF4ED6ACC840', // www.intel.com / OnDie CA DEBUG Root Cert Signing CA
+                                'C001DF02B31A60A2B37130365956400A2AFCFD147E8552FD7EA3F17F2AB0D457', // www.intel.com / ODCA CA2 CSME Intermediate CA
+                                '5E3EEE5748AC13E0B3D1227FCDC4751AA1402DDE8031D21F63CB4ECF43F02440'  // www.intel.com / OnDie CA CSME Intermediate CA
                             ];
 
                             // Load the entire certificate chain and CRL's
@@ -10641,7 +10643,7 @@ <h4 style="width:100%;border-bottom:1px solid gray">Software KVM</h4>
                 if (idx_d24ForceBootDevice.value > 0) { bootSource = ['Force CD/DVD Boot', 'Force PXE Boot', 'Force Hard-drive Boot', 'Force Diagnostic Boot'][idx_d24ForceBootDevice.value - 1]; }
                 // ###END###{!PowerControl-OneClick}
                 // ###BEGIN###{PowerControl-OneClick}
-                if (idx_d24ForceBootDevice.value > 0) { bootSource = ['Force CD/DVD Boot', 'Force PXE Boot', 'Force Hard-drive Boot', 'Force Diagnostic Boot', 'Force OCR UEFI Boot Option ' + Q('idx_d24customBootMediaIndex').value, 'Force OCR UEFI HTTPS Boot'][idx_d24ForceBootDevice.value - 1]; }
+                if (idx_d24ForceBootDevice.value > 0) { bootSource = ['Force CD/DVD Boot', 'Force PXE Boot', 'Force Hard-drive Boot', 'Force Diagnostic Boot', 'Force OCR UEFI Boot Option ' + Q('idx_d24customBootMediaIndex').value, 'Force OCR UEFI HTTPS Boot', 'Force OCR UEFI HTTPS Boot'][idx_d24ForceBootDevice.value - 1]; }
                 // ###END###{PowerControl-OneClick}
             } else {
             // ###END###{PowerControl-Advanced}

diff --git a/trustedCA/ODCA_CA2_CSME_Intermediate.cer b/trustedCA/ODCA_CA2_CSME_Intermediate.cer
diff --git a/trustedCA/OnDie_CA_CSME_Intermediate.cer b/trustedCA/OnDie_CA_CSME_Intermediate.cer
diff --git a/trustedCA/hashes.txt b/trustedCA/hashes.txt
@@ -0,0 +1,5 @@
+var trustedCsmeRoots = [
+    '3BA13766B1889DCB1E2D55BACCC9EC087452F78783E2EBAFD918FF4ED6ACC840', // www.intel.com / OnDie CA DEBUG Root Cert Signing CA
+    'C001DF02B31A60A2B37130365956400A2AFCFD147E8552FD7EA3F17F2AB0D457', // www.intel.com / ODCA CA2 CSME Intermediate CA
+    '5E3EEE5748AC13E0B3D1227FCDC4751AA1402DDE8031D21F63CB4ECF43F02440'  // www.intel.com / OnDie CA CSME Intermediate CA
+];