From 926b8fcbadc0497758bf116c653e79f8ae583950 Mon Sep 17 00:00:00 2001
From: Yuki Numata <yuki.numata.d89@mail.toshiba>
Date: Thu, 11 Jun 2026 11:44:57 +0900
Subject: [PATCH] [Secure Boot KEK Update] TOSHIBA PK-Signed KEK Update

---
 .../TOSHIBA/KEKUpdate_TOSHIBA_PKe03ae95f.bin  | Bin 0 -> 2744 bytes
 PostSignedObjects/KEK/kek_update_map.json     | 138 +++++++++---------
 2 files changed, 73 insertions(+), 65 deletions(-)
 create mode 100644 PostSignedObjects/KEK/TOSHIBA/KEKUpdate_TOSHIBA_PKe03ae95f.bin

diff --git a/PostSignedObjects/KEK/TOSHIBA/KEKUpdate_TOSHIBA_PKe03ae95f.bin b/PostSignedObjects/KEK/TOSHIBA/KEKUpdate_TOSHIBA_PKe03ae95f.bin
new file mode 100644
index 0000000000000000000000000000000000000000..530da2239400e4967901e2d1bf3e8f33f8a1354b
GIT binary patch
literal 2744
zcmb7FXIK;28qOpkkc6h8iZqp8G6^6c(nUdvNL#uh1VJQ;p^Bmsks<;v2uc$~q!^K2
z6j&)PB8Vu0Ad7TEld32pWhYnN<?*@Cy}R>c&b;S*@A=Mr^M3F2u_I8pE&Q+_S2GfN
zf-i7qbQT>P^qMufT%a1NZb!-k>Bzfq03h&yTqyL>2xEYRK*9kw7>Gro<s*zEK63%=
zKo%Xb6Qm==K{}j03jqh<a5OB%Apf$E@+5`D`yL2jA)Yj07q|n3utg#`MQkX3Uf##t
zBuvO20e=28Z?}^Yh7@0FfIo=_iV1QNGzg#y2!bjqssu+tE+Pbp>fhl%-iHqC*n9-&
z=m<K%0|V&*22KY6*ek~rSX<j_y;a=EZ0KUp*0o=8?4bzyo@TMac0<3lMOcA;F~+2U
zuHUPEkNa_1Wz^7lEsz@Don4V1Jk~ugqP=Xh;H+rJ2@IH?RodBp(V{(6|K*AO_Q9uv
z!x{YY%V+bfeMUV8Vs^EvGm{x*y8~qLydq7)%d1n}aq8rb>1F&QOSejnL{;nu`r4b*
zoDHX(FM7i6{KmvH#E4oW@(u$jN;c09AIQRm7#SpSWkrPy^g4W0$sxMW=<g4I(o!x8
zzgUe`X#4bwL!7Yvmh$(#lZj1tGxoB3AjfhpFRYRmP+mFWd84O=c6YRSUNlX>CxtFA
znZ+3nt>kBL>*~W101UWo30i=n&{q-VMhYPLieBGM({+7NbyYM)<FpRWE>ULv11Qc~
z-iZ_f1up#e08Ul_4#@^00AOQt&7sc@)f|AqsKr^5TBV$gQO4Kn>aNNi(45YyD4a$*
z2y=!8@;kNF+!iHSj{DsydA-hFKi&g6ET5B<7&F~v@7yM#Y^Gz_8>Lx^q%gOphn;H0
zzPWIvwtsDoy{W#15sl_`j_PW%B;9=$RcpCW!k187lG9nWU0p`_Y+v10m~g)%W8$`K
zkG3xSYecrpXMC>xnfh9{Lnei?$)va8*T=R!zva25htRC&V}CH*MM<ilrq+O?ae9=0
zDBs{i8HRl6aK5934K}|*mRw>+<tP059MKbdd41)bLU>ZUwA90p0<rQ4+fv@ZD|tTL
zj!Q`=`d@Sfld9*|{RaZGYJabuy@ptLgCWoXS4ek`P(MMs{)dh5Q!8z5!A+e7$r?!q
zV9m8!@#;4}h|J`3_y3_4y|%|QPJ!Rj`?y3bMoqIxk7;lHrCz&gvdBwky){U6W}+X<
zJSXl}?(iCD2{H*=NLR+V_1O3G1mqTH=DA3o+lSt}Ek33E^8?O4TG$R+mst~5>K2Kq
z=&KiGT;DPsnL#~V<WYL5W-vRo^q$;DH;ksa9Jx<fC$ql3<hkCIKLZxLqZ%F7&5VM5
zP5xLm>?PQq!oW|}cAX#a+ept0A-?#GOCh|xRdnH%ri^N@-4cOdTPA|`WzIQe?`hR$
zBFqBsHEw$%^1kFIe@l=-V@$F8RrDkIf^nnD9$w%)$AO9dB<GFiD33^0W<rv-dB-h>
z`a5IS@(xB;F!-Gn=4m5r-~6o^8tYP5f*cS;^SYz5AIIZ^O+h+aDP&ry-wX?<0!8BZ
z1ghP9>2%Zouy8+V7<43HK{U&{P&l})H9-vA&H@-5zqz+Njp9e~^oQ(=My1f){Jkk;
zf&wVVT1Vh^{Jm~vtuL{U6zJ_v@{_QlP#}W71Q8?>SawHLfmA_cAr&>q?o>3sK@}DR
zo&Q~KB~am8?p=T9-gGtzQzKIeqUrbSDv&7uw@Hq=M#cCkHenu5E<F!ZTHslbR#Sgz
zVtuN_DbcEEn165}MzgNSj1*w~t`9@Jfme~PRQT;$O6L2%#yB?B1RRh1BmZn#zTCM?
zqNE&$!{eaG@(E^<l?e6e)RCsA<;IdtZr7#+50{MdjqGw)?p|!ZvzYBF?%jNtD^KpL
z6((&oYQk%yW+lP9=&`_t%ex~(gYP|Uv2Km`v?R!b<y_MWEiW2XE$GRbvkQbvNbR}T
zfnS?i8@jLHvAnWr#;L`;d^vBfz4LNvCy$4`ugx;4F0k%3$CsXI>8mXrUu95vgOZF)
z)(Sgy1=~DR7ejZy#VC%{M@lLs{=t#lIpJ(G{LLikfG<=jZ;%@*ttby<a!4ffvx@+E
zQD_AefCT93`~YhPw#iC|7_{1CosDYGv`}70Lmg)Wo5&-e@LvQzIFeHg1G9z&z>dKT
zVfr8sYi}HD@9#dk*>=PCMWA3ebQSNG{T}_{p7K*>1{wj9SPXHbE9eY5X4z-iMc8=x
z`&0Me@j*dB%Dz98sq9Yi#Z!H}DO5kaJMAR?FIh+tK}eL){ktq#7!oEl7_w$ra#V&0
zAPvO<y(AkOI{+X(K@afQ4-CR1?EY^?63yT5-{$oHss9jksI-^hsI4o<?;p}Es8;QF
zkq;I=qcNLKj~5x)t4+kXKC(xRQ<h_e@<qaz(pn2+IQDT%$13(7A@7u8UvV;%Rt_W>
zDw8K#2n`227vWX83jt%vGpLc)q~Lw|DuG=J<~_Cjky;FMxx(b=s_w>k#{MRkvbC8z
zH<tpd6fSMtxRvR%Jx%BHEVtn8wcYsPcG(--^-`o;5wW>yQ=OQ+7=ine08C7Vr;5AO
zfMBQ0T#lRKRGqgNq=MeammROtJ@!+cNw&Amu@P%Ha(gq4G+Zn?(-Wd6{l-E#)Wi<u
zHa_&xsS>wQHCZVSY3s`pcL-CE{}d%%ymE4Jx}o>J{xD_r5pIIaH$MIZ5u=yFtAX;R
z)&VU8v38;wJcoAXOX&^N$SN5Y<<v@CtU!HXlg!k5aGHziV_hH6D8h>?8>67}J6=|C
zpK`8x8vkzlJkIt_;)DAxx~<q^hZ9Bzn}$bag1H33R_&Ea^dAawb<EE(IK&PuuQsol
zz7?GVr7SgX53cJzSeZ_~{-XU0Qu-^Gu`oyPaAJey6S8mb3!k_onuq1n8QW-bgK0LZ
zi&#<MO9Da`tbP$<1D&g7J-1Ya%%8G|a61~}Yxl$nt&=_1#eFm3m3Ydhj1tk{V4sZ%
kd1O)Wah-X2Y~GLyFd3Pm240=%G4e@&#>^gL3g*526Xzy9T>t<8

literal 0
HcmV?d00001

diff --git a/PostSignedObjects/KEK/kek_update_map.json b/PostSignedObjects/KEK/kek_update_map.json
index 8371eda..8bf77de 100644
--- a/PostSignedObjects/KEK/kek_update_map.json
+++ b/PostSignedObjects/KEK/kek_update_map.json
@@ -3367,6 +3367,14 @@
             "issued_by": "CN=Microsoft Corporation Third Party Marketplace Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US"
         }
     },
+    "4484f86ec587a3331fd9bbcfa686163160e988e2": {
+        "KEKUpdate": "Microsoft/KEKUpdate_Microsoft_PK19.bin",
+        "Certificate": {
+            "serial_number": "33000000032553d54d8aa4f0a8000000000003",
+            "issued_to": "CN=Microsoft Surface SH2 2022 UEFI PK Signer,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US",
+            "issued_by": "CN=Microsoft Surface SH2 UEFI PK CA 2022,O=Microsoft Corporation,C=US"
+        }
+    },
     "1b6f494b7881ff564f7f9ec7e80c064d9f948454": {
         "KEKUpdate": "Microsoft/KEKUpdate_Microsoft_PK2.bin",
         "Certificate": {
@@ -3375,6 +3383,62 @@
             "issued_by": "CN=Microsoft Surface XLFF 2 UEFI PK CA 2016,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US"
         }
     },
+    "999b48e3e9ab04d5225301ea5fe9bca01abd7021": {
+        "KEKUpdate": "Microsoft/KEKUpdate_Microsoft_PK20.bin",
+        "Certificate": {
+            "serial_number": "3300000013bd6ce0416871e107000000000013",
+            "issued_to": "CN=Microsoft Surface AFF UEFI PK CA 2015,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US",
+            "issued_by": "CN=Microsoft Surface Services for Windows 8 Pro CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US"
+        }
+    },
+    "cb8f3251825dbea9d51c84f03b5c4ee7f9b8a1ad": {
+        "KEKUpdate": "Microsoft/KEKUpdate_Microsoft_PK21.bin",
+        "Certificate": {
+            "serial_number": "330000001be78bae24e4ec1b2500000000001b",
+            "issued_to": "CN=Microsoft Surface LFF 3 Firmware CA 2016,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US",
+            "issued_by": "CN=Microsoft Corporation Third Party Marketplace Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US"
+        }
+    },
+    "5eae312b07e50b3a42505c7939122b67d55d407a": {
+        "KEKUpdate": "Microsoft/KEKUpdate_Microsoft_PK22.bin",
+        "Certificate": {
+            "serial_number": "3300000004592142bd8877b850000000000004",
+            "issued_to": "CN=Microsoft Surface LFF 3 UEFI PK Signer,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US",
+            "issued_by": "CN=Microsoft Surface LFF 3 UEFI PK CA 2016,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US"
+        }
+    },
+    "c35bfe0d95bbcac762e7a9737eb2bf76ffee7b59": {
+        "KEKUpdate": "Microsoft/KEKUpdate_Microsoft_PK23.bin",
+        "Certificate": {
+            "serial_number": "33000000045e848af3bce10f7a000000000004",
+            "issued_to": "CN=Microsoft Surface NFF UEFI PK Signer,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US",
+            "issued_by": "CN=Microsoft Surface NFF UEFI PK CA 2015,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US"
+        }
+    },
+    "e8dfd45c4c0d448b3cf0690f5d0015a65e1e1ff0": {
+        "KEKUpdate": "Microsoft/KEKUpdate_Microsoft_PK24.bin",
+        "Certificate": {
+            "serial_number": "330000000f164e6168c323f0c700000000000f",
+            "issued_to": "CN=Microsoft Surface LFF 2 UEFI PK CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US",
+            "issued_by": "CN=Microsoft Surface Services for Windows 8 Pro CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US"
+        }
+    },
+    "f4bc8d5612a016f593639b4ff01ea945d80e06be": {
+        "KEKUpdate": "Microsoft/KEKUpdate_Microsoft_PK25.bin",
+        "Certificate": {
+            "serial_number": "33000000113fa8b680b9432bc0000000000011",
+            "issued_to": "CN=Microsoft Surface XLFF UEFI PK CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US",
+            "issued_by": "CN=Microsoft Surface Services for Windows 8 Pro CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US"
+        }
+    },
+    "f7ce165799cce9d68d5c236664ebe4903e2cb02a": {
+        "KEKUpdate": "Microsoft/KEKUpdate_Microsoft_PK26.bin",
+        "Certificate": {
+            "serial_number": "330000000bc06653149db57abd00000000000b",
+            "issued_to": "CN=Microsoft Surface LFF UEFI PK CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US",
+            "issued_by": "CN=Microsoft Surface Services for Windows 8 Pro CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US"
+        }
+    },
     "3f169742cbe8830e6f6a1c0b7008932598dd912d": {
         "KEKUpdate": "Microsoft/KEKUpdate_Microsoft_PK3.bin",
         "Certificate": {
@@ -3439,70 +3503,6 @@
             "issued_by": "CN=Microsoft Surface NFF UEFI PK CA 2015,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US"
         }
     },
-    "4484f86ec587a3331fd9bbcfa686163160e988e2": {
-        "KEKUpdate": "Microsoft/KEKUpdate_Microsoft_PK19.bin",
-        "Certificate": {
-            "serial_number": "33000000032553d54d8aa4f0a8000000000003",
-            "issued_to": "CN=Microsoft Surface SH2 2022 UEFI PK Signer,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US",
-            "issued_by": "CN=Microsoft Surface SH2 UEFI PK CA 2022,O=Microsoft Corporation,C=US"
-        }
-    },
-    "999b48e3e9ab04d5225301ea5fe9bca01abd7021": {
-        "KEKUpdate": "Microsoft/KEKUpdate_Microsoft_PK20.bin",
-        "Certificate": {
-            "serial_number": "3300000013bd6ce0416871e107000000000013",
-            "issued_to": "CN=Microsoft Surface AFF UEFI PK CA 2015,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US",
-            "issued_by": "CN=Microsoft Surface Services for Windows 8 Pro CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US"
-        }
-    },
-    "cb8f3251825dbea9d51c84f03b5c4ee7f9b8a1ad": {
-        "KEKUpdate": "Microsoft/KEKUpdate_Microsoft_PK21.bin",
-        "Certificate": {
-            "serial_number": "330000001be78bae24e4ec1b2500000000001b",
-            "issued_to": "CN=Microsoft Surface LFF 3 Firmware CA 2016,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US",
-            "issued_by": "CN=Microsoft Corporation Third Party Marketplace Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US"
-        }
-    },
-    "5eae312b07e50b3a42505c7939122b67d55d407a": {
-        "KEKUpdate": "Microsoft/KEKUpdate_Microsoft_PK22.bin",
-        "Certificate": {
-            "serial_number": "3300000004592142bd8877b850000000000004",
-            "issued_to": "CN=Microsoft Surface LFF 3 UEFI PK Signer,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US",
-            "issued_by": "CN=Microsoft Surface LFF 3 UEFI PK CA 2016,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US"
-        }
-    },
-    "c35bfe0d95bbcac762e7a9737eb2bf76ffee7b59": {
-        "KEKUpdate": "Microsoft/KEKUpdate_Microsoft_PK23.bin",
-        "Certificate": {
-            "serial_number": "33000000045e848af3bce10f7a000000000004",
-            "issued_to": "CN=Microsoft Surface NFF UEFI PK Signer,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US",
-            "issued_by": "CN=Microsoft Surface NFF UEFI PK CA 2015,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US"
-        }
-    },
-    "e8dfd45c4c0d448b3cf0690f5d0015a65e1e1ff0": {
-        "KEKUpdate": "Microsoft/KEKUpdate_Microsoft_PK24.bin",
-        "Certificate": {
-            "serial_number": "330000000f164e6168c323f0c700000000000f",
-            "issued_to": "CN=Microsoft Surface LFF 2 UEFI PK CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US",
-            "issued_by": "CN=Microsoft Surface Services for Windows 8 Pro CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US"
-        }
-    },
-    "f4bc8d5612a016f593639b4ff01ea945d80e06be": {
-        "KEKUpdate": "Microsoft/KEKUpdate_Microsoft_PK25.bin",
-        "Certificate": {
-            "serial_number": "33000000113fa8b680b9432bc0000000000011",
-            "issued_to": "CN=Microsoft Surface XLFF UEFI PK CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US",
-            "issued_by": "CN=Microsoft Surface Services for Windows 8 Pro CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US"
-        }
-    },
-    "f7ce165799cce9d68d5c236664ebe4903e2cb02a": {
-        "KEKUpdate": "Microsoft/KEKUpdate_Microsoft_PK26.bin",
-        "Certificate": {
-            "serial_number": "330000000bc06653149db57abd00000000000b",
-            "issued_to": "CN=Microsoft Surface LFF UEFI PK CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US",
-            "issued_by": "CN=Microsoft Surface Services for Windows 8 Pro CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US"
-        }
-    },
     "017439b429ac01514cc62311f5d5779341d57c82": {
         "KEKUpdate": "Mouse Computer Co Ltd/KEKUpdate_Mouse_Computer_Co_Ltd_PK1.bin",
         "Certificate": {
@@ -3759,6 +3759,14 @@
             "issued_by": "CN=Toshiba Industrial Computer,O=TOSHIBA,ST=Tokyo,C=JP"
         }
     },
+    "e03ae95f7862f2e1f75b367ed1372e73e8d8cbfd": {
+        "KEKUpdate": "TOSHIBA/KEKUpdate_TOSHIBA_PKe03ae95f.bin",
+        "Certificate": {
+            "serial_number": "9942a88a182ee96f",
+            "issued_to": "CN=Toshiba Industrial Computer",
+            "issued_by": "CN=Toshiba Industrial Computer"
+        }
+    },
     "029d01cb5887c2e799b15ee9a360af0ec6e72622": {
         "KEKUpdate": "Techvision/KEKUpdate_Techvision_PK1.bin",
         "Certificate": {
@@ -3871,4 +3879,4 @@
             "issued_by": "CN=ZEBRA Technologies"
         }
     }
-}
+}
\ No newline at end of file