Contents

enrollSecureBootSignatures(_:)

Enrolls the given signatures to Secure Boot databases.

Declaration

func enrollSecureBootSignatures(_ signatures: VZEFISignatureDatabaseConfiguration) throws

Parameters

  • signatures:

    Signatures to enroll in the KEK, db, and dbx signature databases.

Discussion

This operation appends the given signatures to the Key Exchange Key (KEK) database, allowed signature database (db), and forbidden signature database (dbx). The method ignores a signature that already exists in the database. You can add these signatures before or after enrolling a Platform Key. The framework preserves the Platform Key, if present.

Call this method multiple times to incrementally add signatures without replacing existing ones.