Advantech SOM-5871, User Manual

Page: 80 / 104

SOM-5871 User Manual 72
3.1.4.2 Key Management
Feature Options Description
Factory Key Provision
Disabled
Enabled Provision factory default keys on next re-
boot only when system in Setup Mode
Restore Factory Keys Press Yes or No
Force system to User Mode. Configure
NVRAM to contain OEM-defined factory
default secure boot keys
Enroll Efi Image
Check Valid File
System Available
or not
Allow the image to run in Secure Boot
mode. Enroll SHA256 Hash certificate of a
PE image into Authorized Signature Data-
base (db)
Restore DB defaults Press Yes or No Restore DB variable to factory defaults
Platform Key(PK)
Update
Append
Enroll factory defaults or load certificates
from a file:
1. Public Key Certificate in:
a)EFI_SIGNATURE_LIST, b)
EFI_CERT_X509(DER ), c)
EFI_CERT_RSA2048 (bin), d)
EFI_CERT_SHA256, 384, 512
2. Authenticated UEFI Variable
3. EFI PE/COFF Image (SHA256)
Key Source: Factory, External, Mixed