Releases · pbatard/Mosby

Add -x option to install the Microsoft Windows Production PCA 2011 revocation DBX update.
Do not use this option unless you know what you are doing!
Detect and ask to reset the variables (MokSBState, MokDBState, MokIgnoreDB) that may bypass parts of the Shim Secure Boot validation.

Installable data is now embedded directly in the executable. No need to copy additional files.
Automatic detection of the runtime architecture when simply invoking Mosby (which runs the Mosby.nsh UEFI Shell script behind the scenes, and then runs the relevant Mosby_###.efi executable).
Added support for installation/update of the Secure Boot Advanced Targeting SBAT variable for Shim/GRUB.
Added support for installation/update of the Microsoft SkuSiPolicyVersion (SSPV) and SkuSiPolicyUpdateSigners (SSPU) variables.
Added DBX update for Microsoft's new Secure Version Number Windows bootloader revocation.

Fix non-x86 compatibility.
With this version, as long as your platform has a working UEFI Random Number Generator, Mosby should be able to run on it.
Fix OVMF compatibility.
Add loading of .auth binaries.
Persist onscreen messages after dialog prompts.
Improve Setup Mode user guidance.

Add ARM and RISCV64 binaries.
Fix .pfx generation.
Add a new [DETECT] mode for DB, that automatically reuses the generated cert if present.

Initial release
Note: The .pfx generated with this version is invalid. You should either wait for the next version to fix this or create your own .pfx with openssl using the .pem and .crt.

Provide feedback