跳到正文

CC: Tweaked – Secure Boot PKI

作者:P4ncak3s_r0ck

An Addon For CC Secure boot that adds PKI to devices

收藏

介绍

中文介绍正在准备中,下面暂时显示原文。

This mod was vibe coded with care — each line has been hand reviewed and understood by the dev!

AI is a tool, not a replacement. Vibe code with care <3

What Is This Mod?

An addon for CCSecureBoot that adds Certificate Authority support to Secure Boot.

Why?

I originally built the mod for a project adding metering to Create mod via Create New Age. I wanted to sign things with a CA and use it on computers with the enrolled CA already in place.

If you want to deploy computers without worrying about tampering, regular Secure Boot is for you. But if you only need to manage a single certificate, PKI is the way to go.

What Else Does The Mod Add?

A PKI API! Using require("pki") you can access all the available functions described here.

How Do I Use It?

When setting up Secure Boot, use the install-ca command to add a CA to the local computer. Insert a floppy with the public key and it installs automatically.

To enable Secure Boot, run enroll-secure-boot and insert a disk for that computer’s key.



PKI Q&A

What is PKI?

PKI (Public Key Infrastructure) is a system for managing digital certificates and public-private key pairs. It lets you verify the authenticity and integrity of software using cryptographic signatures — so you can be sure a program hasn’t been tampered with.

What is a CA?

A Certificate Authority (CA) is a trusted entity that issues and signs digital certificates. When a computer trusts a CA, it automatically trusts anything that CA has signed — making it easy to manage many signed programs under one umbrella.

Why should I use a CA?

If you need to sign and deploy multiple programs or scripts across many computers, a CA simplifies everything. Just enroll the CA once on each computer, and anything signed by that CA will be trusted automatically — no need to manage individual keys per program.

When shouldn’t I use a CA?

If you only have one program to sign and one computer to secure, a CA adds unnecessary complexity. Regular Secure Boot with a single key pair is simpler and more than sufficient in that case.

常见问题

CC: Tweaked – Secure Boot PKI 支持哪些 Minecraft 版本?

CC: Tweaked – Secure Boot PKI 支持 Minecraft Java 版 1.21.1,可用的加载器:NeoForge。下载时注意选择和你游戏版本一致的文件。

CC: Tweaked – Secure Boot PKI 怎么安装?

先用 PCL2 或 HMCL 启动器安装对应版本的 NeoForge,再把下载的 .jar 文件放进游戏目录的 mods 文件夹,重新启动游戏即可。开启了版本隔离的,mods 文件夹在 versions/版本名 下面。运行环境:仅服务端。

评论

登录后评论和评分