I want to check if my Lenovo T480 is afftected by the recent PKFail, but have no idea how to extract the bios firmware for validation. Can someone detail the steps? Thanks.
I want to check if my Lenovo T480 is afftected by the recent PKFail, but have no idea how to extract the bios firmware for validation. Can someone detail the steps? Thanks.
https://arstechnica.com/security/2024/07/secure-boot-is-completely-compromised-on-200-models-from-5-big-device-makers/
Bottom of that article, there are commands to run from windows and Linux to detect it. Probably easier than messing with the firmware.
Thanks for the hint. I followed and checked: safe
$ efi-readvar -v PK Variable PK, length 983 PK: List 0, type X509 Signature 0, size 955, owner 3cc24e96-22c7-41d8-8863-8e39dcxxxxxx Subject: C=JP, ST=Kanagawa, L=Yokohama, O=Lenovo Ltd., CN=Lenovo Ltd. PK CA 2012 Issuer: C=JP, ST=Kanagawa, L=Yokohama, O=Lenovo Ltd., CN=Lenovo Ltd. PK CA 2012