5 Commits

Author	SHA1	Message	Date
Richard Hughes	41a1650c2a	Remove HSI update and attestation suffixes ... The logic here is that the attestation is more than just the PCR0 value, and multiple device firmware (such as EC, ME, etc.) needs to be included to validate the system. By the same logic, updates for the system firmware do not tell the whole story, and confuse HSI as a specification. Remove them.	2020-11-05 15:12:12 +00:00
Richard Hughes	2409b302a6	trivial: Fix typo in HSI document	2020-10-26 15:17:39 +00:00
Richard Hughes	7d1267fd84	Clarify various parts of the HSI specification ... Firsly, that HSI isn't expected for embedded devices and then secondary how we require SecureBoot to be available for HSI:1 At the moment we get a runtime failure if it is disabled. Making SB a part of `HSI:1` makes this requiremnt explicit and prevents us getting `HSI:2!` if it is not available.	2020-10-02 09:13:56 +01:00
Mario Limonciello	82c3e3471d	Remove support for UEFI dbx security attribute ... This is no longer relevant as fwupd is providing dbxtool now.	2020-08-19 07:38:51 +01:00
Richard Hughes	fd0ee5153e	Add some of the HSI specification to the generated documentation	2020-08-17 20:23:49 +01:00