Shim 15.6 - shimx64.efi and shimia32.efi for MicroFocus ZENworks

[MuthuvelKuppusamy]

Confirm the following are included in your repo, checking each box:

• completed README.md file with the necessary information
• shim.efi to be signed
• public portion of your certificate(s) embedded in shim (the file passed to VENDOR_CERT_FILE)
• binaries, for which hashes are added to vendor_db ( if you use vendor_db and have hashes allow-listed )
  N/A
• any extra patches to shim via your own git tree or as files
  N/A
• any extra patches to grub via your own git tree or as files
  N/A
• build logs
• a Dockerfile to reproduce the build of the provided shim EFI binaries

---

What is the link to your tag in a repo cloned from rhboot/shim-review?

---

https://github.com/MuthuvelKuppusamy/shim-review/tree/microfocus-shim-x64-ia32-20221006

---

What is the SHA256 hash of your final SHIM binary?

---

ea874837dadc941950c207de64f367dc24c3a2bbef5c14eba15fac0dd527a729 shimia32.efi
405e5051ca30923652235c8aceb4a2e5911e5db67c11f35e7206948f1d8df65f shimx64.efi

---

What is the link to your previous shim review request (if any, otherwise N/A)?

---

#166

[MuthuvelKuppusamy]

Kindly review and approve. We have lot of critical issues required this approval and signing.

[MuthuvelKuppusamy]

Please let us know is there any other information missing for this review.

[frozencemetery]

Minimal Suse Linux Enterprise(SLE) distro (or) Windows Preboot Environment(WinPE) distro used to secure-boot the device in USB/CD/PXE mode.

Why do you need your own shim? Could you just use SUSE's shim+grub2+kernel that are already signed?

[MuthuvelKuppusamy]

Shim will load our custom second stage efi file, which talks to our server about the work type. Based on work type the linux or winpe minimal distro will be loaded. We support imaging using minimal distro of both Linux and WinPE.

[MuthuvelKuppusamy]

We have one minor custom patch in our shim, which prefers the proxyDhcpOfferReceived over dhcpack for our work flow.

[MuthuvelKuppusamy]

Kindly check our previous accepted shim-review submission with custom second stage.
#166
Is any other thing missing for the review?

[MuthuvelKuppusamy]

Kindly let us know the status of the review. We have lot of critical customer issues with our current shim.

[MuthuvelKuppusamy]

Kindly let us know, resubmission with 15.7 is mandatory or not. As we have submitted the shim with MS before Nov 30.

[MuthuvelKuppusamy]

@julian-klode @vathpela @frozencemetery : Kindly update the status for this request. We have too many critical issues.

[MuthuvelKuppusamy]

Closing this request, Hence having new #311

[MuthuvelKuppusamy]

Closing this request, As we are tracking #320 with NX compatibility.