PSA: Microsoft will update the DBX Secure Boot key (the current one expires in 2026): https://techcommunity.microsoft.com/t5/windows-it-pro-blog/revoking-vulnerable-windows-boot-managers/ba-p/4121735
This means your BIOS setup now differs from factory settings and *needs to stay that way*, otherwise your old backups and rescue media will just not boot anymore.
So do not use “reset to factory keys” functions in your BIOS, and be sure you have a full disk encryption backup, as some BIOSes are more eager than others to wipe TPM-backed keys when changing…
Michael Stapelberg 🐧🐹😺 /
npub1k7…dkcjg
2024-05-13 18:39:07
Author Public Key
npub1k7e4ark4f9vrlejsgyuxpuhk9zmrc8r7ru6nkvxauzvjq67qk59qedkcjgPublished at
2024-05-13 18:39:07Event JSON
{
"id": "40db0e3510858f185ca41f0f75fff68d8099680c55695cc371600e39cd38af5e",
"pubkey": "b7b35e8ed549583fe650413860f2f628b63c1c7e1f353b30dde099206bc0b50a",
"created_at": 1715625547,
"kind": 1,
"tags": [
[
"proxy",
"https://mas.to/users/zekjur/statuses/112435235902831931",
"activitypub"
]
],
"content": "PSA: Microsoft will update the DBX Secure Boot key (the current one expires in 2026): https://techcommunity.microsoft.com/t5/windows-it-pro-blog/revoking-vulnerable-windows-boot-managers/ba-p/4121735\n\nThis means your BIOS setup now differs from factory settings and *needs to stay that way*, otherwise your old backups and rescue media will just not boot anymore.\n\nSo do not use “reset to factory keys” functions in your BIOS, and be sure you have a full disk encryption backup, as some BIOSes are more eager than others to wipe TPM-backed keys when changing…",
"sig": "0318de69799457b55f4e3170f6baf1cc7a85cbd159a599708dc75a181e5635ff16f72ee85dbc209e4c6026e50747395178c3d949d7fd0a8114397a32bf9e9fcc"
}