Comment 18 for bug 1696154

------- Comment From <email address hidden> 2017-09-08 13:05 EDT-------
(In reply to comment #27)
> (In reply to comment #25)
> > Does IBM have any feedback for us regarding the test kernel Andy provided?
> >
>
> We're planning to test this month. We'll give feedback as soon as the test
> is completed. The tentative target will be Sept. 29 or sooner.
>
>
> > Can you please clarify if this means you are expecting the db entry to be
> > delivered as an x509 certificate issued by the CA key listed in KEK, or if
> > it should be delivered according to the format defined in the UEFI spec for
> > authenticated variable updates?
>
> Our team needs to have some discussions before finalizing the expected
> format. We'll get back to you soon. Thanks!

Our team confirms that it should be delivered according to ESL format.