Hi,
I need to boot an EFI image of grub2 with Secure Boot enabled. I know that ti-u-boot can access public keys from TIFS and verify the signature of a kernel before loading it.
So I guess that instead of loading a kernel I can load a signed grub2 image. Does ti-u-boot populate relevant EFI variables so that grub2 can verify the signature of the kernel that it will load?