Secure Boot Attacks and Defenses

  1. Key Management and Certificate Infrastructure
    1. Stakeholder Roles and Responsibilities
      1. Original Equipment Manufacturers (OEMs)
        1. Platform Key Provisioning
          1. Initial Database Population
            1. Hardware Security Implementation
              1. Customer Key Management Support
              2. Operating System Vendors
                1. Bootloader Signing
                  1. Key Distribution
                    1. Update Mechanisms
                      1. Revocation Procedures
                      2. Certificate Authorities
                        1. Microsoft UEFI CA
                          1. Third-Party Certificate Authorities
                            1. Community-Based Authorities
                              1. Cross-Certification Relationships
                            2. Key Lifecycle Management
                              1. Key Generation Procedures
                                1. Key Distribution Methods
                                  1. Key Storage Security
                                    1. Key Rotation Policies
                                      1. Key Revocation Processes
                                      2. Database Management Operations
                                        1. Database Enrollment Procedures
                                          1. Database Update Mechanisms
                                            1. Database Synchronization
                                              1. Database Backup and Recovery
                                              2. Custom Key Management
                                                1. User-Controlled Keys
                                                  1. Custom Mode Operations
                                                    1. Alternative Operating System Support
                                                      1. Self-Signed Certificate Management

                                                    Previous

                                                    3. The Secure Boot Process

                                                    Go to top

                                                    Next

                                                    5. Attack Vectors and Threat Analysis