man/uki.conf.example

   1 [UKI]
   2 SecureBootPrivateKey=/etc/kernel/secure-boot.key.pem
   3 SecureBootCertificate=/etc/kernel/secure-boot.cert.pem
   4
   5 [PCRSignature:initrd]
   6 Phases=enter-initrd
   7 PCRPrivateKey=/etc/kernel/pcr-initrd.key.pem
   8 PCRPublicKey=/etc/kernel/pcr-initrd.pub.pem
   9
  10 [PCRSignature:system]
  11 Phases=enter-initrd:leave-initrd enter-initrd:leave-initrd:sysinit
  12        enter-initrd:leave-initrd:sysinit:ready
  13 PCRPrivateKey=/etc/kernel/pcr-system.key.pem
  14 PCRPublicKey=/etc/kernel/pcr-system.pub.pem