Hi Yao, The "read only FV" that you mentioned is generated by a tool? I had PK, KEK, DB, DBX .cer and don't know how to merge them to a FV file to include it to FDF file in edk2. Thank you! Vu

Dear all, I'm currently developing UEFI payload with Secure Boot enabled. I want to customize Secure Boot configuration (PK, KEK, DB, DBX) at build time of Edk2 instead of changing Secure Boot in BIOS