Speaker
Sherif Nagy
Description
This talk walks through the end-to-end process for Linux distributions to have their SHIM submitted for review and eventual signing by Microsoft, surfacing the challenges faced by both distribution teams and the SHIM review team.
We examine this process in depth from dual vantage points: distribution maintainers navigating submission requirements -- including SBAT entries, CVE patching, DBX and revocation policies -- and the SHIM review team evaluating submissions.
We also address the Partner centre for Windows Hardware and what Linux distribution teams need to eventually get the SHIM signed by Microsoft.