Ctrl IQ, Inc EL9 Shim 15.8 for aa64

[jason-rodri]

Confirm the following are included in your repo, checking each box:

• completed README.md file with the necessary information
• shim.efi to be signed
• public portion of your certificate(s) embedded in shim (the file passed to VENDOR_CERT_FILE)
• binaries, for which hashes are added to vendor_db ( if you use vendor_db and have hashes allow-listed )
• any extra patches to shim via your own git tree or as files
• any extra patches to grub via your own git tree or as files
• build logs
• a Dockerfile to reproduce the build of the provided shim EFI binaries

---

What is the link to your tag in a repo cloned from rhboot/shim-review?

---

https://github.com/ctrliq/ciq-shim-build/tree/ciq-shim-EL9-aa64-20250114

---

What is the SHA256 hash of your final SHIM binary?

---

SHA256 (shimaa64.efi) = 6f6c85adeef3fb3945525618927fa543c39e430bf9b7b2eacb381d3d697b098a

---

What is the link to your previous shim review request (if any, otherwise N/A)?

---

#366
#420
#430

---

If no security contacts have changed since verification, what is the link to your request, where they've been verified (if any, otherwise N/A)?

---

Verification notification

[steve-mcintyre]

Contacts already verified in #339

[steve-mcintyre]

Existing vendor with a shim signed in #430, so needs two reviews this time.