Re: [PATCH v9 0/4] powerpc: expose secure variables to the kernel and userspace

2019-11-11 Thread Michael Ellerman
Lakshmi Ramasubramanian writes: > On 11/10/19 7:10 PM, Nayna Jain wrote: > > Hi Nayna, > >> In order to verify the OS kernel on PowerNV systems, secure boot requires >> X.509 certificates trusted by the platform. These are stored in secure >> variables controlled by OPAL, called OPAL secure

Re: [PATCH v9 0/4] powerpc: expose secure variables to the kernel and userspace

2019-11-11 Thread Lakshmi Ramasubramanian
On 11/10/19 7:10 PM, Nayna Jain wrote: Hi Nayna, In order to verify the OS kernel on PowerNV systems, secure boot requires X.509 certificates trusted by the platform. These are stored in secure variables controlled by OPAL, called OPAL secure variables. In order to enable users to manage the

[PATCH v9 0/4] powerpc: expose secure variables to the kernel and userspace

2019-11-10 Thread Nayna Jain
In order to verify the OS kernel on PowerNV systems, secure boot requires X.509 certificates trusted by the platform. These are stored in secure variables controlled by OPAL, called OPAL secure variables. In order to enable users to manage the keys, the secure variables need to be exposed to