Post #1185292

RE: https://hachyderm.io/@badnetmask/115786742434227283 Hey folks, if anyone ever followed my blog post about enrolling the Talos UEFI keys into the Lenovo M720Q Tiny, you might want to look at it again. I realized I forgot one step, which is completely optional, and may vary according to your security posture, but doing so provides better security. After you enroll the Talos key, the BIOS switches to "User Mode", which allows the OS to change the keys. Ideally you should go back into the BIOS and change to "Deployed Mode". This way you can only change the keys by physically booting the machine. Sorry about that. #HomeLab #TalosLinux #Lenovo #blog @homelab