how to sign shimx64.efi by Microsoft?

george guo 1

We want to do a Linux distribution。
For secure boot, I got the message "Linux distributions can pay a one-time fee of $99 to access the Microsoft Sysdev portal, where they can apply to have their boot loaders signed." This boot loader is the shim binary file, that is shimx64.efi for x86_64.
I wonder where we can commit our shim binary file signed by Microsoft , and how to pay the fee?

JamesTran-MSFT 36,541 Reputation points Microsoft Employee

2021-05-27T19:43:15.983+00:00
@george guo
Thank you for your post!

For the shimx64.efi by Microsoft, is there any documentation or link you can share for that?

Can you also share a screenshot of the message you're receiving?

When you say "where we can commit our shim binary file" are you referring to saving it to a VM? Or storing it in the Azure Key Vault?

Any additional information on what you're trying to do would be greatly appreciated!

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.
george guo 1 Reputation point

2021-05-28T06:41:06.267+00:00

Thank you for paying attention to my question.

For the shimx64.efi by Microsoft, is there any documentation or link you can share for that?
Can you also share a screenshot of the message you're receiving?

For these 2 questions, here is the link, you can take a look for understanding my question better
https://www.technologytodays.com/gadgets/how-secure-boot-works-on-windows-8-and-10-and-what-it-means-for-linux.html

When you say "where we can commit our shim binary file" are you referring to saving it to a VM? Or storing it in the Azure Key Vault?

this is not about VM, shim binary file is used for all machine with OS.
For Linux OS, here take Centos for an example:

this shimx64.efi is signed by Microsoft.
We want to our Linux distribution'shim just like Centos's shim module singed by Microsoft. But we don't know how to let Microsoft sign our shim binary.

Share via

how to sign shimx64.efi by Microsoft?