Secure Boot: How to extract nVidia UEFI boot option ROM from "vBIOS" to generate hash for custom PK, KEK, db? (black screen upon boot without "Microsoft Corporation UEFI CA 2011" in db, which I do not want)

This page summarizes the projects mentioned and recommended in the original post on /r/linuxquestions

Our great sponsors
  • WorkOS - The modern identity platform for B2B SaaS
  • InfluxDB - Power Real-Time Data Analytics at Scale
  • SaaSHub - Software Alternatives and Reviews
  • UEFIRomExtract

    UEFI Video Card ROM Extractor

  • My idea: Extract the boot option ROM from the GPU, calculate the hash and add it (with the corresponding GUID of nVidia) to the signature database (db), to allow this single GPU in my system. Extracting the vBIOS ROM is no real issue (I used nvflash via Windows, since it takes care for everything like unregistering the GPU from the system while extracting the vBIOS). Extracting the UEFI part from this blob however is not so straight forward. I found this quite old program called UEFIRomExtract. But I only get an error like

  • gpu-passthrough-for-clevo-p650hp6

    A rundown of steps taken and decisions made in an attempt to achieve GPU passthrough on the Metabox Prime P650HP laptop

  • I found a "GOP Update Tool" (GOPupd.py) in a zipfile posted on win-raid.com. I seriously have no idea, where this file originates from. A copy of that file can be found in another random github repo here.

  • WorkOS

    The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

    WorkOS logo
  • fiedka

    a visual toolkit for exploring and editing firmware images, running on web platforms

  • Since the log is purely binary, one has to extract the data first according to this manual.

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts