fittool

Overview ¶

fittool manipulates Intel Firmware Interface Table (FIT) in an UEFI image.

See "Firmware Interface Table BIOS Specification": * https://www.intel.com/content/dam/develop/external/us/en/documents/firmware-interface-table-bios-specification-r1p2p1.pdf

Synopsis:

fittool init -f UEFI_FILE
fittool add_raw_headers -f UEFI_FILE [options]
fittool set_raw_headers -f UEFI_FILE -n ENTRY_ID [options]
fittool remove_headers -f UEFI_FILE -n ENTRY_ID [options]
fittool show -f UEFI_FILE [options]

An example:

fittool init -f firmware.fd
fittool add_raw_headers -f firmware.fd --type 2 --address $((16#100000)) --size $((16#20000))
fittool set_raw_headers -f firmware.fd -n 1 --type $((16#7F))
fittool remove_headers -f firmware.fd -n 1
fittool show -f firmware.fd --format=json --include-data | jq -r '.[] | select(.Headers.Type == 2) | .DataParsed.EntrySACMDataInterface.TXTSVN'

Description:

init:            Creates a FIT
add_raw_headers: Add raw headers to FIT
set_raw_headers: Overwrite the row # ENTRY_ID with specified RAW headers
remove_headers:  Remove headers from row entry # ENTRY_ID
show:            Print FIT

For more advanced key manifest and boot policy manifest management see also Converged Security Suite: * https://github.com/9elements/converged-security-suite *

• Copyright (c) Facebook, Inc. and its affiliates. All Rights Reserved.