hello Username1,
to clarify, do you have a request to have ALL partitions to be signed and encrypted?
-
below were used to control disk formats. they are used to control boot flow.
secondary_gpt
master_boot_record
primary_gpt -
these were in a clear text, it’s not boot code, they are also used to control boot flow.
SMD
VER
BOOTCTRLNAME
CPUBL-CFG -
this is the only piece that is unsigned and has not encrypted.
xusb-fw