@@ -43,6 +43,12 @@ Documentation:
4343
4444Here are the commands executed on RHEL 10.
4545
46+ * Install required packages
47+
48+ ``` shell
49+ dnf install pesign openssl kernel-devel mokutil keyutils
50+ ```
51+
4652* Create public and private key
4753
4854 ` ` ` shell
@@ -53,13 +59,13 @@ Here are the commands executed on RHEL 10.
5359 --nickname ' Custom Secure Boot key'
5460 ` ` `
5561
56- * Export public key to ` sb_cert.cer `
62+ * Export public key to ` sb_cert.der `
5763
5864 ` ` ` shell
5965 certutil -d /etc/pki/pesign \
6066 -n ' Custom Secure Boot key' \
6167 -Lr \
62- > sb_cert.cer
68+ > sb_cert.der
6369 ` ` `
6470
6571* Export private key to ` sb_cert.p12`
@@ -89,7 +95,7 @@ In my virtual lab environment running on KVM/libvirt with [hetzner-ocp4](https:/
8995* Copy the public key to the VM via SSH
9096
9197 ` ` ` shell
92- scp sb_cert.cer core@compute-X:~ /
98+ scp sb_cert.der core@compute-X:~ /
9399 ` ` `
94100
95101* Check & import the key via ` mokutil` on the node:
@@ -100,7 +106,7 @@ In my virtual lab environment running on KVM/libvirt with [hetzner-ocp4](https:/
100106 Subject: CN=Red Hat Secure Boot CA 8/emailAddress=secalert@redhat.com
101107
102108 # Set a simple password; it will be needed later in the UEFI shell.
103- % sudo mokutil --import sb_cert.cer
109+ % sudo mokutil --import sb_cert.der
104110 input password:
105111 input password again:
106112 ` ` `
@@ -234,7 +240,7 @@ Create the key pair in the earlier section [If Secure Boot is enabled: Create an
234240 ` ` ` shell
235241 oc create secret generic secureboot-signing-key-pub \
236242 -n ibm-fusion-access \
237- --from-file=cert=sb_cert.cer
243+ --from-file=cert=sb_cert.der
238244 ` ` `
239245
240246# ## Optional: Configure external registry for kernel module container image
0 commit comments