From 9a2edebea56bb5a5e6ecf4cf15a9144cf7bd4335 Mon Sep 17 00:00:00 2001 From: Jarrod Johnson Date: Fri, 31 Oct 2025 08:26:47 -0400 Subject: [PATCH] Filter out UEFI boot certificates for BMC certificate candidates Change-Id: Idf836b6d675e429879b164085ff2db84780754fc --- pyghmi/redfish/oem/generic.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/pyghmi/redfish/oem/generic.py b/pyghmi/redfish/oem/generic.py index 7ea1b8d9..9c21648d 100644 --- a/pyghmi/redfish/oem/generic.py +++ b/pyghmi/redfish/oem/generic.py @@ -430,6 +430,8 @@ class OEMHandler(object): certcollections.discard(candcoll) elif 'KMIP' in candcoll: # not for TLS certcollections.discard(candcoll) + elif 'Boot/Certificates' in candcoll: + certcollections.discard(candcoll) if len(certcollections) > 1: raise exc.PyghmiException('Multiple certificate collections found, unable to infer intended target for certificate operation') certcoll = list(certcollections)[0] @@ -462,6 +464,8 @@ class OEMHandler(object): allcerts.discard(certurl) elif 'KMIP' in certurl: allcerts.discard(certurl) + elif 'Boot/Certificates' in certurl: + allcerts.discard(certurl) if len(allcerts) > 1: raise exc.PyghmiException('Multiple Certificates found, unable to infer intended target for certificate installation') targcerturl = list(allcerts)[0]