Key Management

• Microsoft keys included with most (x86) PCs
• Logistics of being a CA
• Arm-based machines too
• And likely further architectures
• Multiple keyrings defined
• PK, KEK, DB, DBX
• Two root CA keys currently in common use:
• Microsoft Root CA (2010)
• Microsoft Third Party UEFI CA (2011)
• On most machines you can modify the list of trusted keys