From f75d0af22590b8c457316ea64e798ea35412dd48 Mon Sep 17 00:00:00 2001
From: Zito Chung <zito.chung@mitacmdt.com>
Date: Wed, 25 Mar 2026 17:25:57 +0800
Subject: [PATCH 1/2] [Secure Boot KEK Update] MiTAC PK-Signed KEK Update

---
 .../KEK/MiTAC/KEKUpdate_MiTAC_PK1.bin         | Bin 0 -> 2979 bytes
 PostSignedObjects/KEK/kek_update_map.json     | 280 +++++++++---------
 2 files changed, 144 insertions(+), 136 deletions(-)
 create mode 100644 PostSignedObjects/KEK/MiTAC/KEKUpdate_MiTAC_PK1.bin

diff --git a/PostSignedObjects/KEK/MiTAC/KEKUpdate_MiTAC_PK1.bin b/PostSignedObjects/KEK/MiTAC/KEKUpdate_MiTAC_PK1.bin
new file mode 100644
index 0000000000000000000000000000000000000000..b7a50565103f595c20a13e944c7af75773bd956a
GIT binary patch
literal 2979
zcmb7G2{@E%8=h}AGn_FxV=Y9&m|^Cfu_R6;%P)Jj8cULO5~D#J)k$+Swou4HWGGR|
zl0r$g7Lj8q9d!;OOGmQwYa{u;`CItU^<SOqeAjn<@B2LOd%w^7J>PTR@ApImg(a<$
zLVUR@F>nt#E1uU=ZZ#M<wKeg)&Y=yie#L-?If=zn_?G;)1V{ua;9>Z%i-&|D1`!aj
z_+5NU$Pa}^LKp-PTb>9BcqkdbLy-UvS`eU+5E3b2UbWCNpRbW*P3Tq({9*MaA^h{g
zkQfY?XRHRYSd<GIMOtOcb~Z6pGWFwzv;EmV-r;^gQHH?K20Bb#27?LTZZZVsvdM7!
z8#E7Ew=x{OTNDo>BH-PLB6$#ms83ow-g?N-JXfbIXJ(HhO@7s}fmDmz$>vQ%DlHEY
z>ORGW(g{-*ORngh_WTPJw*z;7+bwGw5Rda6ohzuN2Rev7u&8A;9p9Bl4m51c58<Eg
zkxLsxK!pw8#pvqAA1+Rmp&aiBO+6f=QIWumATRWvH&|o$qGKO7z{4@WjaAA4IWA<p
zDvtMhVVb#}ir#YYCNZGdO~CS^(C;6Y8SnH5&L0G4`jpPa1{!N7-v5#5^42zFL43V@
zlI{tgby>aEGjC(995U*SR*ex;B$MTAexF>EN)b>qOhJ1GxneAjxlk!*8KKabH+rM(
zTyxdL0YAlEUgNEs^}8$ZaYz(|fX-|K_P`eY0tyh?0+_`}6bbmG)U=3$dD8|2%wiL&
zK=IpY=Kb9_hLa8<_9PWuo4>7McC7e&wjQZAI&lQ0RwCH$SmrhMQ_QYc)dd_U7M^L4
zxSrN`ty*jEaQaet(TUl5|3_OgCQXKVIhJ)#1Lem{yBX@bV&N`j7KS_Wry8#|Ka1$&
zwaS?twHfoujE^lnB0gua#p6Lr=Kg%B-FMEua!LE~<BEYdTPKqxBx0+vPjh-Yt>nm>
zY1dfs&#>-^Ss`H)()#OnFIZ*Evy^2E4!>4?k(C>3f7i6UEf+C%;`_xCRDYJYN-+6f
z2alDeQ_cFWxDTd3I?>lV)_KrSRktqHw>w6uD{(xIJV2Y<BPYMwhP5O9rSkpVKbxqJ
zMp%nAi`gIRGE}TP&EO%o03Ol^<`4kiPU!z9%?i#5j*P&Z`9dQ+im{S|Kz?}y!yv+p
z(F58{U7!bafSwzmFOQ-b>(EN(K3Orp%#7&gY~-RuP8m!ErM7J=kvN!Tml}U|legSX
z@Z&Oo$k+?^2nqjrFA!y=A-&Q-0#PjP6VFj1K>TYTi9{k|U{Zb=Ln5KgKm?1SildMs
z|LZ6Jg}Z1Tgb211H=XlHNdnPT?y@0O*ksD>^2LUAVeRhD3yN>3`G+M9A#+=mj{eux
z{RSl;>)eVoZmIBnt<MKAJ@6mH)TYy}v(<;RlIO^WQt<PUGBObcvBvsk@7`~(ZAiY~
ztUh70z3F6pOC^32^QFeq6AJ13;uW$MT<TI9yj)l+=-@xxB5U;ybU5|eF7`!d%WrQa
zdd1afl%q{8Z<i9tU6E4y4K&u-qng}BT!wuCU8^y&<fqk>d9?PhYP~A$M-PAH-Mi`;
z6oI2(X!yM=`(49;?Ai8!<B=4-l5~sVLkY(1Yp6CC+6ZrhT$M>FNm3Y@iJKf-(ab;x
z$Fr4>d)*@oSdB#^8O2s{S1(F=P-nQqLIH=bJ8)Z{Gat!9F>UL2k>|!!qpV@Yz6^_T
z&L<%zX~WY<lG3%_!91Sze?g>`2^MOx8$%4>g<6ayAzhppFz<ziC`rne?Zf4Sas0!T
zOgY?84%a)J%?V*pfyO7{Ubj5%=wzZ~=C_~i;}@pn$l<^M6D1~KGK5MFOSd*)3N3A2
zSjn~ZKbhJ>6L|cy*jj-4Dfas1*emv?WNmJ(#I*h#T^m;XZ=VFucE%@#X|{;o`t$X#
zN3>>%vue5<y0<#*t8`CyEFY2@97x(&UvA?U;WYY0l$k}>R;#Ao%*f84eA1kP(Mcl_
zeHy|Gxg{Du<ujEvaI9OAw<u{gan+~|FLH)k?p?7|Zt>2Tkl9u_E;+p3ht~V*PSLBv
zoom^5wh@Xo792%SJ&S)HxKuZv#xB1lz2rIS^>lF3-$l&3xztc8Wbg{%1+}%SS;vl-
zxp8WiaTL92`qBP{mbRweV{|bI@+r%l3JJ-xk26LC-8(|YqbF|&w$`3^>a(R^KG6E)
z#^v!37egf?PnvICywqbX)9#=1>X2T)sOE5EoU&H>@3_pK=N`^OpH2cE6bxsI4bv4q
z4Tuo5ghs=MI3Gx0@l-5?hIkvKAfX2V6ofOx(b8zirx&?5GL4pM{ZAc|a5FXX*y0@L
z1?0X0B$4Rv6h#qEhzP`Pgek%V5QRvRaBU1g!3|g|bf}<Zfpm;ytQjAR$THTvP<1=u
z-=(yBV|jQK@Dom0i{1%5fSX{4z?JVD7#<#KK&MAWM$&@6R3^=b6HE^cVsk>n=sw)N
z^si;1$^>vx!q3lTDYW6jgd0<#S6GfT7y!6f9Q=|Pj0gmw{edso{lx}IzU$vcg#TH>
z{%Oqczwi$Q|6n1GBC+4k2b9@wJYTExhbJXU?tuPOE-!V>@DH1qqB|RQV8=P{l4VQQ
z#J)b&b}0#GCa#vO+2<9aqAD`)Zlgxq&oHHhJa1(*S@pa^)|{J-7|DEz9d0`rWmclS
z{~^`(w;O-N8D6y2xRjYt)7zYS(W1q(YVl>!>DT*fs7IHw3i5;GPZ_<P5|=r%s7D{_
zAZN*M&Q@zfC7;us=n*YWk}gw*5Q^%=8u80p7_PLjcPSI!>CD&-h5|OayYoS=uLbA6
za!30#hFOO@*Ozau?`hYQo0jlr*hn-^SJD1l^YtL3nzhb4Tj#Gtw?7fAWgVeX-o&d_
z%<p~mqN%UUWQg;jf%H5?a(w(QDrs}Jgg!Pnv>s|5NOo1wC)%r&sBRvpBWszKpS_{<
z^HuD7jB>u=wI2zgK~9Yk&1)n`RU;gHNoRMB_&$%Cd#R)HGbESC>DS6UjoZX3SbNN^
zT85sfM-ilteAuB?X>whb&^a@G5vOSX?!%o$>wbl4pz5&k%-~1kYx6HMf9dLYk5*eC
zSjyr0hSHlH?uG>Sbp@rI<oY_?d+Cx8(qvtTeaO6eKG+Y6o^{+Vivb?BWdBt)(KGw(
z_};ssgI({s<BbZZABvw&d$2b9O<tu!R8-K?a|*gVD!^!lB3As=6Z$hQTNfOE`I~uA
O?)|aCkujO#{{H~@0%q_4

literal 0
HcmV?d00001

diff --git a/PostSignedObjects/KEK/kek_update_map.json b/PostSignedObjects/KEK/kek_update_map.json
index ab261b0..d738a1f 100644
--- a/PostSignedObjects/KEK/kek_update_map.json
+++ b/PostSignedObjects/KEK/kek_update_map.json
@@ -1,4 +1,60 @@
 {
+    "be4a1ac7ff36c0faf0c643274a80a5e78d0b2551": {
+        "KEKUpdate": "Aava Mobile Oy/KEKUpdate_Aava_Mobile_Oy_PK1.bin",
+        "Certificate": {
+            "serial_number": "82186208b7486373",
+            "issued_to": "CN=UEFI PK Aava test",
+            "issued_by": "CN=UEFI PK Aava test"
+        }
+    },
+    "f2b275e88a170fea01364af397baf44b7f6af804": {
+        "KEKUpdate": "Aava Mobile Oy/KEKUpdate_Aava_Mobile_Oy_PK3.bin",
+        "Certificate": {
+            "serial_number": "dd68b91d4b23f3c1",
+            "issued_to": "CN=uefi_pk",
+            "issued_by": "CN=uefi_pk"
+        }
+    },
+    "97b12a139d3858e70de4dc785d4c24767914af04": {
+        "KEKUpdate": "Acer/KEKUpdate_Acer_PK1.bin",
+        "Certificate": {
+            "serial_number": "5c43f0519fbeb3ae47d3d46e347411d4",
+            "issued_to": "CN=Acer Platform Key,O=Acer,L=Taipei,ST=TW,C=Taiwan",
+            "issued_by": "CN=Acer Root CA,O=Acer,L=Taipei,ST=TW,C=Taiwan"
+        }
+    },
+    "6cd7005bdf38b270649ae6ad19ee46c7b040f8c2": {
+        "KEKUpdate": "Acer/KEKUpdate_Acer_PK6CD7005B.bin",
+        "Certificate": {
+            "serial_number": "fad95b59cd8a3bd5",
+            "issued_to": "CN=Acer India,OU=HEAD OFFICE,O=Acer India Private Limited,L=BANGALORE,ST=KARNATAKA,C=IN",
+            "issued_by": "CN=Acer India,OU=HEAD OFFICE,O=Acer India Private Limited,L=BANGALORE,ST=KARNATAKA,C=IN"
+        }
+    },
+    "9dbdabc291fb598cb61ac0826b3273b37648b9f4": {
+        "KEKUpdate": "Acer/KEKUpdate_Acer_PK9DBDABC2.bin",
+        "Certificate": {
+            "serial_number": "b023c7b2fa4763cb",
+            "issued_to": "OU=RD,O=BIOSTAR Microtech International Corp,L=TAIPEI,ST=TAIWAN,C=TW",
+            "issued_by": "OU=RD,O=BIOSTAR Microtech International Corp,L=TAIPEI,ST=TAIWAN,C=TW"
+        }
+    },
+    "2f005cebcf48ecc720406c24350113298328f044": {
+        "KEKUpdate": "Adlink/KEKUpdate_Adlink_PK1.bin",
+        "Certificate": {
+            "serial_number": "8fb14a09c371be7a",
+            "issued_to": "CN=Dell secure boot platform key 2022,O=Dell Technologies Inc.,L=Portland,ST=California,C=US",
+            "issued_by": "CN=Dell secure boot platform key 2022,O=Dell Technologies Inc.,L=Portland,ST=California,C=US"
+        }
+    },
+    "5ecf2d6a6727b27ab195498d9c10d8ae88d3d606": {
+        "KEKUpdate": "Adlink/KEKUpdate_Adlink_PK5ECF2D6A.bin",
+        "Certificate": {
+            "serial_number": "86a97d2c010f0059",
+            "issued_to": "CN=Adlink Platform Key,O=Adlink Technology Inc.,L=Taipei,ST=Taiwan,C=TW",
+            "issued_by": "CN=Adlink Platform Key,O=Adlink Technology Inc.,L=Taipei,ST=Taiwan,C=TW"
+        }
+    },
     "9a3056b5260f628645b4d9ac61aebd8060305c3e": {
         "KEKUpdate": "AMI/KEKUpdate_AMI_PK1.bin",
         "Certificate": {
@@ -159,62 +215,6 @@
             "issued_by": "CN=HQ NBD1 PlatformKey Certificate"
         }
     },
-    "be4a1ac7ff36c0faf0c643274a80a5e78d0b2551": {
-        "KEKUpdate": "Aava Mobile Oy/KEKUpdate_Aava_Mobile_Oy_PK1.bin",
-        "Certificate": {
-            "serial_number": "82186208b7486373",
-            "issued_to": "CN=UEFI PK Aava test",
-            "issued_by": "CN=UEFI PK Aava test"
-        }
-    },
-    "f2b275e88a170fea01364af397baf44b7f6af804": {
-        "KEKUpdate": "Aava Mobile Oy/KEKUpdate_Aava_Mobile_Oy_PK3.bin",
-        "Certificate": {
-            "serial_number": "dd68b91d4b23f3c1",
-            "issued_to": "CN=uefi_pk",
-            "issued_by": "CN=uefi_pk"
-        }
-    },
-    "97b12a139d3858e70de4dc785d4c24767914af04": {
-        "KEKUpdate": "Acer/KEKUpdate_Acer_PK1.bin",
-        "Certificate": {
-            "serial_number": "5c43f0519fbeb3ae47d3d46e347411d4",
-            "issued_to": "CN=Acer Platform Key,O=Acer,L=Taipei,ST=TW,C=Taiwan",
-            "issued_by": "CN=Acer Root CA,O=Acer,L=Taipei,ST=TW,C=Taiwan"
-        }
-    },
-    "6cd7005bdf38b270649ae6ad19ee46c7b040f8c2": {
-        "KEKUpdate": "Acer/KEKUpdate_Acer_PK6CD7005B.bin",
-        "Certificate": {
-            "serial_number": "fad95b59cd8a3bd5",
-            "issued_to": "CN=Acer India,OU=HEAD OFFICE,O=Acer India Private Limited,L=BANGALORE,ST=KARNATAKA,C=IN",
-            "issued_by": "CN=Acer India,OU=HEAD OFFICE,O=Acer India Private Limited,L=BANGALORE,ST=KARNATAKA,C=IN"
-        }
-    },
-    "9dbdabc291fb598cb61ac0826b3273b37648b9f4": {
-        "KEKUpdate": "Acer/KEKUpdate_Acer_PK9DBDABC2.bin",
-        "Certificate": {
-            "serial_number": "b023c7b2fa4763cb",
-            "issued_to": "OU=RD,O=BIOSTAR Microtech International Corp,L=TAIPEI,ST=TAIWAN,C=TW",
-            "issued_by": "OU=RD,O=BIOSTAR Microtech International Corp,L=TAIPEI,ST=TAIWAN,C=TW"
-        }
-    },
-    "2f005cebcf48ecc720406c24350113298328f044": {
-        "KEKUpdate": "Adlink/KEKUpdate_Adlink_PK1.bin",
-        "Certificate": {
-            "serial_number": "8fb14a09c371be7a",
-            "issued_to": "CN=Dell secure boot platform key 2022,O=Dell Technologies Inc.,L=Portland,ST=California,C=US",
-            "issued_by": "CN=Dell secure boot platform key 2022,O=Dell Technologies Inc.,L=Portland,ST=California,C=US"
-        }
-    },
-    "5ecf2d6a6727b27ab195498d9c10d8ae88d3d606": {
-        "KEKUpdate": "Adlink/KEKUpdate_Adlink_PK5ECF2D6A.bin",
-        "Certificate": {
-            "serial_number": "86a97d2c010f0059",
-            "issued_to": "CN=Adlink Platform Key,O=Adlink Technology Inc.,L=Taipei,ST=Taiwan,C=TW",
-            "issued_by": "CN=Adlink Platform Key,O=Adlink Technology Inc.,L=Taipei,ST=Taiwan,C=TW"
-        }
-    },
     "f77be268ff7cd9691721db46df7405b93fc4ee89": {
         "KEKUpdate": "Attis/KEKUpdate_Attis_PK1.bin",
         "Certificate": {
@@ -559,38 +559,6 @@
             "issued_by": "CN=GIGABYTE"
         }
     },
-    "d52ac7db954c167a386e1aa955249a4d9bdadedd": {
-        "KEKUpdate": "HP/KEKUpdate_HP_PK1.bin",
-        "Certificate": {
-            "serial_number": "5fb660d4c2fb166b6576b7257a4c37ab",
-            "issued_to": "O=HP Inc.,C=US,OU=CODE-SIGN,CN=HP UEFI Secure Boot PK 2017",
-            "issued_by": "CN=HP Inc. PK 2016 CA,O=HP Inc.,C=US"
-        }
-    },
-    "ef40e88b7f2cc718a087051db5d5d4c26043c5aa": {
-        "KEKUpdate": "HP/KEKUpdate_HP_PK5.bin",
-        "Certificate": {
-            "serial_number": "7758a5f8cb1dcfd32c6a7f8f03816b04",
-            "issued_to": "CN=HP UEFI Secure Boot 2013 PK Key,OU=Long Lived CodeSigning Certificate,O=Hewlett-Packard Company",
-            "issued_by": "CN=Hewlett-Packard Printing Device Infrastructure CA,O=Hewlett-Packard Company,C=US"
-        }
-    },
-    "bba4b07810638f77e1a86200e36ec1619df14e81": {
-        "KEKUpdate": "HP/KEKUpdate_HP_PK3.bin",
-        "Certificate": {
-            "serial_number": "1b6aef498cfb7f90b681321ae89ec2ef",
-            "issued_to": "CN=Hewlett-Packard UEFI Secure Boot Platform Key,OU=Long Lived CodeSigning Certificate,O=Hewlett-Packard Company",
-            "issued_by": "CN=Hewlett-Packard Printing Device Infrastructure CA,O=Hewlett-Packard Company,C=US"
-        }
-    },
-    "30c1554337e11377a52bf3b111bfd42ca1a5c4cd": {
-        "KEKUpdate": "HP/KEKUpdate_HP_PK4.bin",
-        "Certificate": {
-            "serial_number": "77378497e4baff8b4aabb90ca4003af8",
-            "issued_to": "O=Hewlett Packard Enterprise Company,C=US,OU=CODE-SIGN,CN=HPE UEFI Secure Boot 2016 PK Key",
-            "issued_by": "CN=Hewlett Packard Enterprise Private Code Signing Intermediate CA,O=Hewlett Packard Enterprise Company,C=US"
-        }
-    },
     "fbf45fd17e6fa21ab21ac1fd7b760fee70f78002": {
         "KEKUpdate": "Honor/KEKUpdate_Honor_PK1.bin",
         "Certificate": {
@@ -671,6 +639,38 @@
             "issued_by": "CN=GalileoG platform key："
         }
     },
+    "d52ac7db954c167a386e1aa955249a4d9bdadedd": {
+        "KEKUpdate": "HP/KEKUpdate_HP_PK1.bin",
+        "Certificate": {
+            "serial_number": "5fb660d4c2fb166b6576b7257a4c37ab",
+            "issued_to": "O=HP Inc.,C=US,OU=CODE-SIGN,CN=HP UEFI Secure Boot PK 2017",
+            "issued_by": "CN=HP Inc. PK 2016 CA,O=HP Inc.,C=US"
+        }
+    },
+    "ef40e88b7f2cc718a087051db5d5d4c26043c5aa": {
+        "KEKUpdate": "HP/KEKUpdate_HP_PK5.bin",
+        "Certificate": {
+            "serial_number": "7758a5f8cb1dcfd32c6a7f8f03816b04",
+            "issued_to": "CN=HP UEFI Secure Boot 2013 PK Key,OU=Long Lived CodeSigning Certificate,O=Hewlett-Packard Company",
+            "issued_by": "CN=Hewlett-Packard Printing Device Infrastructure CA,O=Hewlett-Packard Company,C=US"
+        }
+    },
+    "bba4b07810638f77e1a86200e36ec1619df14e81": {
+        "KEKUpdate": "HP/KEKUpdate_HP_PK3.bin",
+        "Certificate": {
+            "serial_number": "1b6aef498cfb7f90b681321ae89ec2ef",
+            "issued_to": "CN=Hewlett-Packard UEFI Secure Boot Platform Key,OU=Long Lived CodeSigning Certificate,O=Hewlett-Packard Company",
+            "issued_by": "CN=Hewlett-Packard Printing Device Infrastructure CA,O=Hewlett-Packard Company,C=US"
+        }
+    },
+    "30c1554337e11377a52bf3b111bfd42ca1a5c4cd": {
+        "KEKUpdate": "HP/KEKUpdate_HP_PK4.bin",
+        "Certificate": {
+            "serial_number": "77378497e4baff8b4aabb90ca4003af8",
+            "issued_to": "O=Hewlett Packard Enterprise Company,C=US,OU=CODE-SIGN,CN=HPE UEFI Secure Boot 2016 PK Key",
+            "issued_by": "CN=Hewlett Packard Enterprise Private Code Signing Intermediate CA,O=Hewlett Packard Enterprise Company,C=US"
+        }
+    },
     "04c4adbcde6eebd0e940cf18f5546c9eb403a523": {
         "KEKUpdate": "Huawei/KEKUpdate_Huawei_PK1.bin",
         "Certificate": {
@@ -799,30 +799,6 @@
             "issued_by": "CN=Kontron EPC-Boards PK,OU=EPC-Boards,O=Kontron Europe GmbH,C=DE"
         }
     },
-    "940708c942905ed073ac47f3bd67397dd6560532": {
-        "KEKUpdate": "LG/KEKUpdate_LG_PK1.bin",
-        "Certificate": {
-            "serial_number": "67eb6476fbb5069b42ca733f9dcd6aae",
-            "issued_to": "CN=LG Electronics inc.",
-            "issued_by": "CN=LG Electronics inc."
-        }
-    },
-    "f44a2967222909b8d97b731c83b762271919eee5": {
-        "KEKUpdate": "LG/KEKUpdate_LG_PK2.bin",
-        "Certificate": {
-            "serial_number": "4bad88265909f29eb7827157954a75a5",
-            "issued_to": "CN=LG Electronics Inc.,O=LG Electronics Inc.,L=경기도 평택시,ST=경기도 평택시,C=KR",
-            "issued_by": "CN=VeriSign Class 3 Code Signing 2010 CA,OU=Terms of use at https://www.verisign.com/rpa (c)10,OU=VeriSign Trust Network,O=VeriSign\\, Inc.,C=US"
-        }
-    },
-    "bdeab99f8bf89c3d5b4f98433503e29bc7fcb416": {
-        "KEKUpdate": "LG/KEKUpdate_LG_PK3.bin",
-        "Certificate": {
-            "serial_number": "6899b994460771561324368e930e04e99e053be1",
-            "issued_to": "CN=LGE Linux PK Certificate",
-            "issued_by": "CN=LGE Linux PK Certificate"
-        }
-    },
     "46c73daf3047d1ece967d093edf72ac5ffc86586": {
         "KEKUpdate": "Lenovo/KEKUpdate_Lenovo_PK1.bin",
         "Certificate": {
@@ -3199,6 +3175,30 @@
             "issued_by": "CN=LENOVO"
         }
     },
+    "940708c942905ed073ac47f3bd67397dd6560532": {
+        "KEKUpdate": "LG/KEKUpdate_LG_PK1.bin",
+        "Certificate": {
+            "serial_number": "67eb6476fbb5069b42ca733f9dcd6aae",
+            "issued_to": "CN=LG Electronics inc.",
+            "issued_by": "CN=LG Electronics inc."
+        }
+    },
+    "f44a2967222909b8d97b731c83b762271919eee5": {
+        "KEKUpdate": "LG/KEKUpdate_LG_PK2.bin",
+        "Certificate": {
+            "serial_number": "4bad88265909f29eb7827157954a75a5",
+            "issued_to": "CN=LG Electronics Inc.,O=LG Electronics Inc.,L=경기도 평택시,ST=경기도 평택시,C=KR",
+            "issued_by": "CN=VeriSign Class 3 Code Signing 2010 CA,OU=Terms of use at https://www.verisign.com/rpa (c)10,OU=VeriSign Trust Network,O=VeriSign\\, Inc.,C=US"
+        }
+    },
+    "bdeab99f8bf89c3d5b4f98433503e29bc7fcb416": {
+        "KEKUpdate": "LG/KEKUpdate_LG_PK3.bin",
+        "Certificate": {
+            "serial_number": "6899b994460771561324368e930e04e99e053be1",
+            "issued_to": "CN=LGE Linux PK Certificate",
+            "issued_by": "CN=LGE Linux PK Certificate"
+        }
+    },
     "ebb51e6221c7b626ba6c39402d7450a1018d12eb": {
         "KEKUpdate": "MSI/KEKUpdate_MSI_PK3.bin",
         "Certificate": {
@@ -3231,22 +3231,6 @@
             "issued_by": "CN=MEDION_AG"
         }
     },
-    "2ca96734e4a5c4056f527f0016c8c65e1224ad26": {
-        "KEKUpdate": "MSI/KEKUpdate_MSI_PK1.bin",
-        "Certificate": {
-            "serial_number": "8cb17834fb1237a04c72ab6631f4143e",
-            "issued_to": "CN=MSI NB - 2013 PK",
-            "issued_by": "CN=MSI NB - 2013 PK"
-        }
-    },
-    "c82b1878468f40413fa308557b10ed78c683345a": {
-        "KEKUpdate": "MSI/KEKUpdate_MSI_PK2.bin",
-        "Certificate": {
-            "serial_number": "1dcdb29760a12aa0433d0430993c8d84",
-            "issued_to": "CN=MSI NB PK 2022",
-            "issued_by": "CN=MSI NB PK 2022"
-        }
-    },
     "8058e8cc51749652804bbd6f39aed713d119c64b": {
         "KEKUpdate": "Microsoft/KEKUpdate_Microsoft_PK1.bin",
         "Certificate": {
@@ -3399,6 +3383,14 @@
             "issued_by": "CN=Microsoft Surface NFF UEFI PK CA 2015,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US"
         }
     },
+    "5cff8a49a6516fa15b1f02eeb1b90608cecdecfa": {
+        "KEKUpdate": "MiTAC/KEKUpdate_MiTAC_PK1.bin",
+        "Certificate": {
+            "serial_number": "45b3fbc3fa9f298b4b0dd11e683c1aad",
+            "issued_to": "CN=MiTAC Certificate",
+            "issued_by": "CN=MiTAC Certificate"
+        }
+    },
     "017439b429ac01514cc62311f5d5779341d57c82": {
         "KEKUpdate": "Mouse Computer Co Ltd/KEKUpdate_Mouse_Computer_Co_Ltd_PK1.bin",
         "Certificate": {
@@ -3407,6 +3399,22 @@
             "issued_by": "CN=BYD Certificate 2019"
         }
     },
+    "2ca96734e4a5c4056f527f0016c8c65e1224ad26": {
+        "KEKUpdate": "MSI/KEKUpdate_MSI_PK1.bin",
+        "Certificate": {
+            "serial_number": "8cb17834fb1237a04c72ab6631f4143e",
+            "issued_to": "CN=MSI NB - 2013 PK",
+            "issued_by": "CN=MSI NB - 2013 PK"
+        }
+    },
+    "c82b1878468f40413fa308557b10ed78c683345a": {
+        "KEKUpdate": "MSI/KEKUpdate_MSI_PK2.bin",
+        "Certificate": {
+            "serial_number": "1dcdb29760a12aa0433d0430993c8d84",
+            "issued_to": "CN=MSI NB PK 2022",
+            "issued_by": "CN=MSI NB PK 2022"
+        }
+    },
     "710131e366592696d44cf776fc35ea7112925484": {
         "KEKUpdate": "NEC/KEKUpdate_NEC_PK1.bin",
         "Certificate": {
@@ -3615,6 +3623,14 @@
             "issued_by": "CN=SUPERMICRO PK CA 2018,O=Super Micro Computer Inc.,L=San Jose,ST=CA,C=USA"
         }
     },
+    "029d01cb5887c2e799b15ee9a360af0ec6e72622": {
+        "KEKUpdate": "Techvision/KEKUpdate_Techvision_PK1.bin",
+        "Certificate": {
+            "serial_number": "12a58a7682ed84974304e14f56889975",
+            "issued_to": "CN=Techvision Intelligent Technology Limited",
+            "issued_by": "CN=Techvision Intelligent Technology Limited"
+        }
+    },
     "892e6333fe1f30edeb1c93a16c9e20cc7bfacb3c": {
         "KEKUpdate": "TONGFANG/KEKUpdate_TONGFANG_PK1.bin",
         "Certificate": {
@@ -3647,14 +3663,6 @@
             "issued_by": "CN=AIStoneGlobal Platform Key 2024"
         }
     },
-    "029d01cb5887c2e799b15ee9a360af0ec6e72622": {
-        "KEKUpdate": "Techvision/KEKUpdate_Techvision_PK1.bin",
-        "Certificate": {
-            "serial_number": "12a58a7682ed84974304e14f56889975",
-            "issued_to": "CN=Techvision Intelligent Technology Limited",
-            "issued_by": "CN=Techvision Intelligent Technology Limited"
-        }
-    },
     "60d059444e045a0795b636aeffac566a2f294ebe": {
         "KEKUpdate": "Twinhead/KEKUpdate_Twinhead_PK1.bin",
         "Certificate": {

From 608e0e0f6bff501855fae5464c7ab61269c2e374 Mon Sep 17 00:00:00 2001
From: Zito Chung <zito.chung@mitacmdt.com>
Date: Wed, 25 Mar 2026 19:16:49 +0800
Subject: [PATCH 2/2] [Secure Boot KEK Update] MiTAC PK-Signed KEK Update

---
 .../KEK/MiTAC/KEKUpdate_MiTAC_PK2.bin            | Bin 0 -> 2979 bytes
 PostSignedObjects/KEK/kek_update_map.json        |   8 ++++++++
 2 files changed, 8 insertions(+)
 create mode 100644 PostSignedObjects/KEK/MiTAC/KEKUpdate_MiTAC_PK2.bin

diff --git a/PostSignedObjects/KEK/MiTAC/KEKUpdate_MiTAC_PK2.bin b/PostSignedObjects/KEK/MiTAC/KEKUpdate_MiTAC_PK2.bin
new file mode 100644
index 0000000000000000000000000000000000000000..fe9d6d777e291869e0f4e76d0044b5a0cbdeab10
GIT binary patch
literal 2979
zcmb7GdpwkB8=iNL%rp)=GAiR#guy&B2&*NLC8uT_(jXxshY@n>t7T{;*;-*8YD38}
zq$EYoqLPS|a*Qa2Y=p@7&Q{B}zwfvE+xL%o-s^sz>%E`3-}}0rcNB;FPFP+N@$I^b
zf$xy-h0b>r@9g)SFg=;4aa7CBJqK_xNmxN;o(b<G5yBxexELNB;vyl4E)0lR!F@av
z$Q^}7LKp-ftSp2wxF|B<qDX)Xeab)~AtX{n;x_Z~cTuBRCQ6~d6gt0c<<q}D7$U%Q
zN&0#qfkoM(Q6y0dFB=0x8AJDgATJLuH<uuHAVnrJ)PWXV8)&I(fh}w@QDX&avj2h2
zh2&PJgLjMKLc$1mcX%Whf)Ev(9v<nT2tIV~b8AcqCHLlUtv*!pXs0fIzVxS$CXbid
zmn?CFQ~33i=k`)s{ul8q)y-rvee49D?%bnat#aV`MqoU?)ivj`+_8q|MlB8Tq*EWP
zbd!E9GstA7k?xRC&!#_;mfYM^Y)=z6?^DayHP1{)h}$heKSsoF%Qp_icyvtWNVE;I
z)>$OHIJ3B+tgWK=$u7#vVRnzWsQrjaiqy`c)bQ?SY_imAW4AExT$iEx`9}OnuA_5V
zM|5`80~4%QqK&3rGv>xiC6vRW?T4b2`4p2Nr{lEc8>02CoX)V!ElVuBwK#!WGi_yI
z6XQdrXL;$AMelbP!=I?mBT*0ny2u1pzyf{)6bNk$j3PwdF8`Kd?@*yqGuYTr)H$=1
zDfRbd=Kj+=hKmj%;<9J!5S%yc#9ap)*d;}0Wb&$CyeJOKV^!JRG02ZGC|`_@={jZ-
z-6%@=)H=g(ZBEU$&nOah^Pl=2$95^HW-^S@?xP24>_dL}>GO%iN=Ra8(_&&%>4E2!
z%)xpatL>TlEm75><R_=<qJp7_@z1TGlQ@&Z6s1VI_ST-5+$v^1J380rAy8UQJ6bs3
zuRm7McU`4H(fna_O(UA~pJoZQ>)WFTuIQj<<<7UW9IGysIkO@ocN2ae!#|(kc@FX{
zPpT9TZ&uo1mN@*m)+b(WV$I#xbJ2IZ9oM!ntsCvbM(0je6pkL0b}Gxe##G8|?|b}W
z?tn_Hy!@MAhxW4RT;z7ZMe4yC0^sip`u|0<N^=>J!?0$)$w&}IU#&qPxiW*H3&R51
z0@N9rKu1%X4%mRUGK;3mp=Fw)p5)I62oZdmBib+NpQ)~RRw<s6BlKhIZe8Q!v}sci
zwn7l5`+$Rd!GGNgq`Vr4uLekf#|nJWISL1a{=7#bk%$Obl;7r%NN5|tVKG!86cYEp
zamBxA7tMtbMGH-uag94b62-<dLe<$&R<O@EDyi~8=g7%@wNC3haO>tfs;=BE=RR;s
z{LwsyMGg7oRC1a*PFz3kv-xzQz4C0^2bRP7;iKtwSvuz~seJ0?PNq5*@|a|W@z~!B
zqF=>$);y$7rB14;3F-y97M4C#O?EcDMhKrDU-O?X^LA##l+4I8l>>_|3O|evvWfZC
z^u#?u1x<2Y15qu_q1Q9<CEX4|K^-%R%y<fwoPKBh-tLqZs!!3|lHl%Ju4P_+x?vG?
zsq~obf&^27<iPGDdLn6)gt6m#7x4RHl{K#11g+M`a!IH3p6Ezq`?Ljoj_OJ|_+xKW
zq^`fH;=9?*JvG_Gi8(uC$_myxQl|oj_y!JNP4HNiwh*!h#jvQ_r}$y?bf_8Z*rl);
zr+qPEk~+MMBqn~-#h1%9`-4PUU0}W!v*`pN$oFC_32AFhhjq^fc+y%6FSh_rAjcy}
z#*h=>&k1k|^5Xc>sX*zAam%gDv#bqdjNF60+}s0YSR4*aFpyyY2K}p(s{;lfscXVc
zuC5LKfa-h*9RFQzRY3icd(%qpReO^$+hHcdF#DQa9d`V`KM7v$JrNhEQjc$VJ@YV9
z^}X<W1x>AXQ|m)l9nP|f2iNxZ#pzTPo4X&j9_hg|QfTT5H>h_KQ!l*jsrwnDkw6l5
zs}9Nv$W=Oafg!6Tu%{uUK{>%Z<_1b@JZ-4H<+_P%y-VU7GV|)F*w7|7wXW%=?CGq%
z(q2tWVvf=$7C!yui80UR+Y1R^#SP-iP9x3({ck;N2`+Vox-x$K*NNlQ=0|lJmfU2W
ziTCv5=pQDZ1b?c(SKD=pMi5a<H%TiI5xev(am3T1)o(QXZDoe(%{=R;7PQhM%{`T+
zql*RpA|XjTOqZ^7=#%ezq)i{)(u-Fas)><RJ^NfBxns=HX7I~Nz=eF_N_oL@g--)v
z2wFy?;X|AUM6iNXEQE%*T5BPG1OX`g6+&onwAesFKxMMt@=cHQqatiWJ;&`fG0tG!
zp9C=^dW{qwVU0M9a77p*41h47N#Z{n15oe)r1^o3XbB)5Ar@`K!y;1jRr0Sj#{OQY
z*7EASAPTti7f7S`0!P5ku+OmL*?0y8`F~HNg@lBt`F`t6H8+kg&EMOL;~z+K3-F=+
z*%tB)05>K4`?W3k7;a2>Fyu%1?WhJ5Kmb+%{*xFC4ua4gU_WsEh5?di_m3IjZ<fG+
zn=|My`a{7VScv0D>~{+XimY_<Zfd-6QVv~rM0?^K_w<ILtv@jEd#mlSqnx>TiQEm*
zGwJuP#0eM)Da5Nhb@tmRk6UmsS5OP48>;z@HPdT%c1$D7FTX!Locs<ubT28?C|5nW
zlWNgj`65QQz(VOta%_25-RT13dZ%kk@3McJ2`;A|Urx!q;4PW1_i;jqd~s<DZLn1_
zMRHrJ!aY>{Wz9Do_?$TLB3TF_wOP1asB}BsPVLp)&u`XfOj-8(121%Y+v9WljX4iw
zTklU|7`Fv3KfSO++sU%yTte*Yz~OKKO)0C(b+^3r%B5{IOc$<)-|xwg-V;exo;{&Z
zvfwj4Ui-AjV34y|O&aqP8y&riirbbdqK)<SuY#KU;_WEf!d4q|<+t_SR#Y`CzEmj_
zRfe6%$X?K`2qXG?Th|<}+aN-^Hp~&sZEG(VI^<a1a(YB^ie&rjY(<fi{yjp;o`XAf
z)(^hi97+_AT(nocYH&+}*fup;ARuKmx7f5~)=QZL^1E~{_J7u|SQt<K^-=3QTHzDX
zWSzj%!Lzly?)v#YedPUfQo#OQE$?h&{c6p!u$_#uJYRPx{5@;81O_<XRP+!n51%?@
z$#dBk?rV3~K~OJivQy}{gvZjUv*)i;LPNcm$CS~<p$GJ)lnFTlPSER^R84T^UH1;}
Oa}Qo+4ZkAi^!^u?%7LN)

literal 0
HcmV?d00001

diff --git a/PostSignedObjects/KEK/kek_update_map.json b/PostSignedObjects/KEK/kek_update_map.json
index d738a1f..e95f8c1 100644
--- a/PostSignedObjects/KEK/kek_update_map.json
+++ b/PostSignedObjects/KEK/kek_update_map.json
@@ -3391,6 +3391,14 @@
             "issued_by": "CN=MiTAC Certificate"
         }
     },
+    "10d8609df90643180acb0d4b041332a25717465b": {
+        "KEKUpdate": "MiTAC/KEKUpdate_MiTAC_PK2.bin",
+        "Certificate": {
+            "serial_number": "18bb51d31283e7a248297891ac5feccd",
+            "issued_to": "CN=MiTAC Certificate",
+            "issued_by": "CN=MiTAC Certificate"
+        }
+    },
     "017439b429ac01514cc62311f5d5779341d57c82": {
         "KEKUpdate": "Mouse Computer Co Ltd/KEKUpdate_Mouse_Computer_Co_Ltd_PK1.bin",
         "Certificate": {