From fe7c54d4431250aab3e9158fe4139a71b2fa86c9 Mon Sep 17 00:00:00 2001
From: Ylian Saint-Hilaire <ysainthilaire@hotmail.com>
Date: Tue, 18 Aug 2020 15:33:52 -0700
Subject: [PATCH] UEFI Boot Fix.

---
 index.html                               |   6 ++++--
 trustedCA/ODCA_CA2_CSME_Intermediate.cer | Bin 0 -> 807 bytes
 trustedCA/OnDie_CA_CSME_Intermediate.cer | Bin 0 -> 813 bytes
 trustedCA/hashes.txt                     |   5 +++++
 4 files changed, 9 insertions(+), 2 deletions(-)
 create mode 100644 trustedCA/ODCA_CA2_CSME_Intermediate.cer
 create mode 100644 trustedCA/OnDie_CA_CSME_Intermediate.cer
 create mode 100644 trustedCA/hashes.txt

diff --git a/index.html b/index.html
index 5189933..9e32cef 100644
--- a/index.html
+++ b/index.html
@@ -4871,7 +4871,9 @@
                             stack.amtauth.uuidStr = guidToStr(stack.amtauth.UUID).toLowerCase();
 
                             var trustedCsmeRoots = [
-                                '3BA13766B1889DCB1E2D55BACCC9EC087452F78783E2EBAFD918FF4ED6ACC840' // www.intel.com / OnDie CA DEBUG Root Cert Signing CA
+                                '3BA13766B1889DCB1E2D55BACCC9EC087452F78783E2EBAFD918FF4ED6ACC840', // www.intel.com / OnDie CA DEBUG Root Cert Signing CA
+                                'C001DF02B31A60A2B37130365956400A2AFCFD147E8552FD7EA3F17F2AB0D457', // www.intel.com / ODCA CA2 CSME Intermediate CA
+                                '5E3EEE5748AC13E0B3D1227FCDC4751AA1402DDE8031D21F63CB4ECF43F02440'  // www.intel.com / OnDie CA CSME Intermediate CA
                             ];
 
                             // Load the entire certificate chain and CRL's
@@ -10641,7 +10643,7 @@
                 if (idx_d24ForceBootDevice.value > 0) { bootSource = ['Force CD/DVD Boot', 'Force PXE Boot', 'Force Hard-drive Boot', 'Force Diagnostic Boot'][idx_d24ForceBootDevice.value - 1]; }
                 // ###END###{!PowerControl-OneClick}
                 // ###BEGIN###{PowerControl-OneClick}
-                if (idx_d24ForceBootDevice.value > 0) { bootSource = ['Force CD/DVD Boot', 'Force PXE Boot', 'Force Hard-drive Boot', 'Force Diagnostic Boot', 'Force OCR UEFI Boot Option ' + Q('idx_d24customBootMediaIndex').value, 'Force OCR UEFI HTTPS Boot'][idx_d24ForceBootDevice.value - 1]; }
+                if (idx_d24ForceBootDevice.value > 0) { bootSource = ['Force CD/DVD Boot', 'Force PXE Boot', 'Force Hard-drive Boot', 'Force Diagnostic Boot', 'Force OCR UEFI Boot Option ' + Q('idx_d24customBootMediaIndex').value, 'Force OCR UEFI HTTPS Boot', 'Force OCR UEFI HTTPS Boot'][idx_d24ForceBootDevice.value - 1]; }
                 // ###END###{PowerControl-OneClick}
             } else {
             // ###END###{PowerControl-Advanced}
diff --git a/trustedCA/ODCA_CA2_CSME_Intermediate.cer b/trustedCA/ODCA_CA2_CSME_Intermediate.cer
new file mode 100644
index 0000000000000000000000000000000000000000..7a59f1f30adaf19ee8520d605f4600b9edec3c4d
GIT binary patch
literal 807
zcmXqLVpcY2Vp_d`nTe5!NyMAc%)V3MYQp4)sz=sxYk%wTwBKjI#m1r4=5fxJg_+r)
zvD1*-fRl|ml!c9lDKr?y;oxC%b~F?*5CX}t^Kb_z=9MHWIOil5B^pW@NPtAScmzH3
zN>Xzaob!tc@{1BnGV}8cl?@a@a@;&p{&_B$sS3`H3PJh#B?``|MI{Qsndy0%dFh5?
z1|lFu%sjm1<>h*rAVc($^K%X4#CeSj42%s-49yKpj7+1%c}*-0jf{cF)Y8;4%D}-;
z%|HcWysW<q&}e5zBL(MRUsnZ?LyB@!Q!*1vKz8D^q0B&ljUDWFCPp?^?M4;`CFUds
zmUf?Qwf{D1Ki&E?%%fy$!TAPu=5B#Zh7IoCvHAB>d1mj(s8nt!%g>!`@rilHnTImP
zTORGXuCOJR<7#8z^!v;z$7X3(2b>F5{Ht>ypUp}@Skx}M{RsQ&KXnGVQ&;Rcdwg*d
zqm)4tqnLp_(Dky)ED{D{4I*12PJVmB;js8q#0kraymftCy>l!KWI+n}Sj1RF7!Smp
zkP%zH$<o0u_S&q8wjXBZJv874NeeSF{%2t|U<OhKd>{dSkN^uX!r2Tm*f_M=7+G1_
z85vn(45ADoV0;6nHlK`=l7eC@ef^T+<V-}c>nG;}LocsH9~@)Oj{3>KxGIM5;+-Ai
zLGcHqKrxt^mYEC;VLhM<15c36@+?jU4hD7$Y!+CxSrBV{Q4Yd%z2u@C<n+j##$b@l
zq^~-A-SIrP)$`Rl^b;0DFZtP$Z2I=aRMl-$7x^^%xBOXlQ115urSDrePCT@3i}UG~
zOa_{NbZp-^#i{PrH<f%Max49k)zmqx?{4h9kheA8x4n$f;p4Mj-}cnpOIwd!P+MlR
F6aW%P1PcHF

literal 0
HcmV?d00001

diff --git a/trustedCA/OnDie_CA_CSME_Intermediate.cer b/trustedCA/OnDie_CA_CSME_Intermediate.cer
new file mode 100644
index 0000000000000000000000000000000000000000..f1e1bfc6298982def085874b48f9343255b2dbee
GIT binary patch
literal 813
zcmXqLV%9WhVp_X^nTe5!Nu;8eiSsT~k*czVdELr*+qu6E3TPYfuyJU$d7QIlVP<A!
zFlg*F<Tl`BV-96u<6#O7hH*G}n4BFAMGS;MGVDCu!HIb#i3-j+iA9NqQU($rQ7#@q
z&%Bb<90lk6qJsRQ#FEVXJVRvzMUWgfkCcC&OJ=Hqv!g;#etwC9b81nELU3k!US?jp
zp_qXPND(s+Z+UsSUM9#8z2y8{137VCLrVh_AOwRbab6QkLnC7#GPN|dj52UAR5MV4
z7%vMq-Z|LURRQFXqTJM!%)}Cqoj7eMGZ0{72m79hk&RWmk%d8tIf;Q~uF!{@?HjI`
zy?Rk!?`iFKb<@=&IUXt<GZXUqe(c=x+>-bCq$BR@Y-T=)(iY1Mn*C<kE#^Hl^R9Hx
zm|YZVePZ2D)%zZ)>?TXKyymE%DQ<XhjwMiO(&EMSr)Is~DPrQ$^mTC)qm)4tqnJSk
z8;3R<BP%OABO^<UL6kuRjBmiy=95uUQc!HAuU}G}oQVh({p5V0=kiMQ!9I3&)K3Nm
zWif;o@9Y>43SJ-u3gFDN%w%8y=mAw2$OFSkR+&Y@K&(MzOT@`<PdFSFe~LI^S&_G{
zkE?f%g#kZEfiNTEe->5)W*}wY2@;TJaWZf)uv=iWz^cuHSO*p5Al##uT$E$L2QrEu
zWHt*hA+j0Bg7|zaVk{zwv$!gzbugbvoUmf4{e;}on)#Vos40>;gTWw`$)M)jw;%IT
zuSGjwT4E${z<*=SQKL>x_qi8}eji*aqd$F>rA=z`+g-jVUwXF}GSB$P%w))LE5-Pz
yi-_+%vG9F2dw)pvt^M6M<ujvbzrezzYmPRZ_PbUY#J~GvcSq>7AXm~+;X?r35(YZ}

literal 0
HcmV?d00001

diff --git a/trustedCA/hashes.txt b/trustedCA/hashes.txt
new file mode 100644
index 0000000..cbef085
--- /dev/null
+++ b/trustedCA/hashes.txt
@@ -0,0 +1,5 @@
+var trustedCsmeRoots = [
+    '3BA13766B1889DCB1E2D55BACCC9EC087452F78783E2EBAFD918FF4ED6ACC840', // www.intel.com / OnDie CA DEBUG Root Cert Signing CA
+    'C001DF02B31A60A2B37130365956400A2AFCFD147E8552FD7EA3F17F2AB0D457', // www.intel.com / ODCA CA2 CSME Intermediate CA
+    '5E3EEE5748AC13E0B3D1227FCDC4751AA1402DDE8031D21F63CB4ECF43F02440'  // www.intel.com / OnDie CA CSME Intermediate CA
+];
\ No newline at end of file