State of ipxe+wimboot and secureboot?

[aggieNick02]

Googling a bit, I found some older forum posts talking about wimboot support for secure boot being in work but no definite ETA. Any update on if/when we might see that? I don't know enough about ipxe/wimboot to know if it is both that need signing or just one in order to be able to pxe boot wimboot.

Is there anything that would help in the process? I saw some of the posts mentioned the $500 for the cert required - would having that mean we could see support soon?

Here are the posts I saw:
http://forum.ipxe.org/showthread.php?tid=7261
http://forum.ipxe.org/showthread.php?tid=8290
http://forum.ipxe.org/showthread.php?tid=7843
http://forum.ipxe.org/showthread.php?tid=7533

[NiKiZe]

You can find signed versions of wimboot in the repo: https://git.ipxe.org/wimboot.git/

And to qoute myself from http://forum.ipxe.org/showthread.php?tid...4#pid13384

(2017-01-12 19:11)NiKiZe Wrote:  Current wimboot is actually signed by MS, the issue with ipxe is that MS does not like what you can do inside of ipxe, and also that the process for signing ipxe needs to be automatic to be officially available.

Not even grub is signed by MS, instead most distros rely on shim.efi which have been signed by MS.

Other then that, going over those threads you linked to and reading anything from mcb30, I think that anything written in 2016 or later is the state we are in right now.

Certificate exists, and the only reason that we don't have a officially signed version of iPXE is that the process of getting it signed must be done manually.