Bug 11530

Summary:	RMC:[EFI] modify shim to launch an EFI binary when not running in secure boot mode
Product:	[Build System, Metadata & Runtime] BSPs	Reporter:	Todor Minchev <todor.minchev>
Component:	bsps-meta-intel	Assignee:	Ng, Wei Tee <wei.tee.ng>
Status:	RESOLVED WONTFIX	QA Contact:
Severity:	enhancement
Priority:	Medium	CC:	bluelightning, sgw
Version:	2.4
Target Milestone:	2.4 M2
Hardware:	x86
OS:	Multiple
Whiteboard:
OS type for building Yocto:	---	Type of Regression:	---
Verified:		Documentation change:	Yes (doc changes required)

Description Todor Minchev 2017-05-18 16:48:45 UTC

When running in non-secure boot mode, RMC just needs to start the next stage bootloader. Modify shim (https://github.com/rhinstaller/shim) to ignore secure boot options and just start the 2nd stage bootloader (load_image -> start_image).

Comment 1 Todor Minchev 2017-05-22 16:59:14 UTC

Thinking about this again, shim will probably do this out of the box. 
It might be just a case of verifying if this is the case.

Comment 2 Todor Minchev 2017-07-10 23:43:49 UTC

Closing this, we decided that RMC will not support secure boot out of the box.