diff --git a/docs/dasharo-tools-suite/documentation/features.md b/docs/dasharo-tools-suite/documentation/features.md index 55c9172dbc..3eb7450990 100644 --- a/docs/dasharo-tools-suite/documentation/features.md +++ b/docs/dasharo-tools-suite/documentation/features.md @@ -474,6 +474,25 @@ version. This is how we can achieve that. version: 2022-08-31_cbff21b ``` +## Verify Intel Boot Guard key + +It's possible to verify which keys currently running firmware is signed with: + +1. Enter the shell in DTS + +1. Execute `btg_key_validator` + +Example output: + +```bash +Reading flash... +Extracting key manifest... +Key matches NovaCustom Meteor Lake signing key. +``` + +The script will output information whether the platform firmware is signed with +the correct Intel Boot Guard key. + ## Additional features The section below presents a list of functionalities added to DTS, which were