HUAWEI RLEF-XX
│
├─KEK CA:
│ │   Device ID:          b7a1d3d90faa1f6275d9a98da4fb3be7118e61c7
│ │   Previous version:   2011
│ │   Update State:       Success
│ │   Last modified:      2025-08-01
│ │   GUID:               814e950f-1449-566a-a190-42c9d3a3a2df
│ │   Device Flags:       • Internal device
│ │                       • Updatable
│ │                       • Supported on remote server
│ │                       • Needs a reboot after installation
│ │                       • Device is usable for the duration of the update
│ │                       • Full disk encryption secrets may be invalidated when updating
│ │                       • Signed Payload
│ │                       • Can tag for emulation
│ │ 
│ └─Secure Boot KEK Configuration Update:
│       New version:      2023
│       Remote ID:        lvfs
│       Release ID:       113979
│       Summary:          UEFI Secure Boot Key Exchange Key
│       Variant:          Huawei
│       License:          Proprietary
│       Size:             2.7 kB
│       Created:          2025-04-29
│       Urgency:          High
│       Vendor:           Linux Foundation
│       Release Flags:    • Trusted payload
│                         • Trusted metadata
│       Description:      
│       This updates the UEFI Signature Database (the "KEK") to the latest release from Microsoft, signed by HWALucienne.
│       Checksum:         df3f9d37c3164dc170c7bbb4e2bb07e4ea24dd152832399e08fa05d98529df58
│     
├─UEFI CA:
│ │   Device ID:          5bc922b7bd1adb5b6f99592611404036bd9f42d0
│ │   Previous version:   2011
│ │   Update State:       Success
│ │   Last modified:      2025-08-01
│ │   GUID:               26f42cba-9bf6-5365-802b-e250eb757e96
│ │   Device Flags:       • Internal device
│ │                       • Updatable
│ │                       • Supported on remote server
│ │                       • Needs a reboot after installation
│ │                       • Full disk encryption secrets may be invalidated when updating
│ │                       • Signed Payload
│ │                       • Can tag for emulation
│ │ 
│ └─Secure Boot Signature Database Configuration Update:
│       New version:      2023
│       Remote ID:        lvfs
│       Release ID:       116503
│       Summary:          UEFI Secure Boot Signature Database
│       License:          Proprietary
│       Size:             10.0 kB
│       Created:          2025-04-29
│       Urgency:          High
│         Tested:         2025-07-24
│         Distribution:   nixos 25.11
│         Old version:    2011
│         Version[fwupd]: 2.0.12
│       Vendor:           Linux Foundation
│       Release Flags:    • Trusted payload
│                         • Trusted metadata
│       Description:      
│       This updates the 3rd Party UEFI Signature Database (the "db") to the latest release from Microsoft. It also adds the latest OptionROM UEFI Signature Database update.
│       Checksum:         6819c8098f09f4332a102194df6a033563aa288073b16315c5b88860fefb7e74
│     
└─UEFI dbx:
  │   Device ID:          362301da643102b9f38477387e2193e57abaa590
  │   Previous version:   20100507
  │   Update State:       Success
  │   Last modified:      2025-08-01
  │   GUID:               f8ba2887-9411-5c36-9cee-88995bb39731
  │   Device Flags:       • Internal device
  │                       • Updatable
  │                       • Supported on remote server
  │                       • Needs a reboot after installation
  │                       • Device is usable for the duration of the update
  │                       • Only version upgrades are allowed
  │                       • Full disk encryption secrets may be invalidated when updating
  │                       • Signed Payload
  │                       • Can tag for emulation
  │ 
  └Secure Boot dbx Configuration Update:
        New version:      20250507
        Remote ID:        lvfs
        Release ID:       115586
        Summary:          UEFI Secure Boot Forbidden Signature Database
        Variant:          x64
        License:          Proprietary
        Size:             24.0 kB
        Created:          2025-01-17
        Urgency:          High
          Tested:         2025-06-11
          Distribution:   fedora 42 (workstation)
          Old version:    20241101
          Version[fwupd]: 2.0.11
        Vendor:           Linux Foundation
        Release Flags:    • Trusted payload
                          • Trusted metadata
        Description:      
        This updates the list of forbidden signatures (the "dbx") to the latest release from Microsoft.
        
        Some insecure versions of BiosFlashShell and Dtbios by DT Research Inc were added, due to a security vulnerability that allowed an attacker to bypass UEFI Secure Boot.
        Issues:           806555
                          CVE-2025-3052
        Checksum:         3ebe1c9be68b6c559ed2831a0bfd891c84e6d6db9af7c61156230d79f6466648
      
