sb_set_siglists.ps1 list of Lenovo certificate names different from dumpEfiVars.exe

[bluikko]

sb_set_siglists.ps1 list of Lenovo certificate names different from dumpEfiVars.exe

[idrassi]

Yes, as you figured it out, these two certificates are already included in the script (lines 63 and 64 in the current version). So you just need to uncomment these two lines.

No need to do anything special on your side, just install 1.23-beta2, clear SecureBoot keys in the BIOS, launch the PowerShell script after uncommenting the adéquate lines, enable SecureBoot in the BIOS and then start the encryption process.

VeraCrypt-DCS bootloader that is included in VeraCrypt is signed with a custom key that is loaded using the PowerShell script and this same key is used to sign the certificates of various manufacturers that are referenced in the PowerShell script.
If a user encounters a certificate that is not included in the script, he must submit it to us so that we sign it and then include it along side its signature in the PowerShell script.