Bug 11538

Summary: RMC: Bless data store
Product: [Build System, Metadata & Runtime] BSPs Reporter: Todor Minchev <todor.minchev>
Component: bsps-meta-intelAssignee: Unassigned <unassigned>
Status: RESOLVED OBSOLETE QA Contact:
Severity: enhancement    
Priority: Medium CC: bluelightning, richard.purdie, sgw, tim.orling
Version: 2.4   
Target Milestone: Future   
Hardware: x86   
OS: Multiple   
Whiteboard:
OS type for building Yocto: --- Type of Regression: ---
Verified: Documentation change: Yes (doc changes required)

Description Todor Minchev 2017-05-18 17:47:56 UTC 
RMC should be able to generate MD5 hash over the contents of the data store and store it in the last field of the data directory in the RMC.efi PE header.

https://upload.wikimedia.org/wikipedia/commons/1/1b/Portable_Executable_32_bit_Structure_in_SVG_fixed.svg

Example:

./rmc -d data_store_dir -f RMC.efi

This MD5 hash will then be used to verify the integrity of the data store when the system is booted in secure boot mode.
Comment 1 Todor Minchev 2017-05-18 17:59:11 UTC 
This should be something like (-b for bless):

./rmc -b -d data_store_dir -f RMC.efi
Comment 2 Tim Orling 2020-06-25 08:40:29 UTC 
Work on RMC has been discontinued and it is no longer supported.