Skip to content

Add Linux Secure Boot certificate status check RunCommand script#130

Open
ScottAzure wants to merge 1 commit into
Azure:masterfrom
ScottAzure:feature/secure-boot-linux
Open

Add Linux Secure Boot certificate status check RunCommand script#130
ScottAzure wants to merge 1 commit into
Azure:masterfrom
ScottAzure:feature/secure-boot-linux

Conversation

@ScottAzure

Copy link
Copy Markdown
Collaborator

Summary

New Linux RunCommand diagnostic script for Secure Boot certificate status checking on Azure Trusted Launch VMs.

New files

  • Script: RunCommand/Linux/SecureBootCertCheck/Detect-SecureBootCertStatus-Linux.sh
  • README: RunCommand/Linux/SecureBootCertCheck/readme.md

What it does

  • Checks Secure Boot state via mokutil and EFI variables
  • Enumerates DB/KEK certificates for Microsoft UEFI CA 2023 presence
  • Reports shim and GRUB package versions (distro-aware: Ubuntu, RHEL, SUSE, Azure Linux)
  • Queries IMDS for VM security type
  • Color-coded PASS/ACTION NEEDED summary with prioritized next steps

Validation

  • Tested on Ubuntu 22.04 (latest + Dec 2023 image) and RHEL 9.4 Azure Trusted Launch VMs
  • Both dpkg and rpm code paths validated
  • Read-only — makes no changes to the device

Related

  • Companion to existing Windows SecureBootCertCheck script
  • ICM 765582227 (Secure Boot cert baseline)
  • KB 5085395 (TVM/CVM guidance)

- New: RunCommand/Linux/SecureBootCertCheck/Detect-SecureBootCertStatus-Linux.sh
- New: RunCommand/Linux/SecureBootCertCheck/readme.md
- Read-only diagnostic: checks mokutil, EFI vars, shim/GRUB packages, IMDS
- Distro-aware: Ubuntu/Debian (dpkg), RHEL/CentOS/Alma/Rocky (rpm), SUSE (rpm)
- Color-coded PASS/ACTION NEEDED summary with next steps
- Tested on Ubuntu 22.04 + RHEL 9.4 Azure Trusted Launch VMs
- Companion to existing Windows SecureBootCertCheck script
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant