DIEBOLD NIXDORF P1.0-APL-AIO, User Manual

Page: 90 / 96

Kaby Lake
8.1.7.1.1
8.1.7.1.1 Key Management
Install Factory Default Keys: Force system to User Mode – install all Factorz
Default keys.
Enroll Efi Image: Allow the image to run in Secure Boot mode. En-
roll SHA256 Hash certificate of a PE image into
Authorized Signature Database (DB).
Platform Key (PK): Enroll Factory Defaults or load certificates from a
file:
1. Public Key Certificate in:
a) EFI_SIGNATURE_LIST
b) EFI_CERT_X509 (DER encoded)
c) EFI_CERT_RSA2048 (bin)
d) EFI_CERT_SHA256, 384, 512
2. Authenticated UEFI Variable
3. EFI PE/COFF Image (SHA256)
Key Source:
Default, External, Mixed, Test
Key Exchange Keys:
Authorized Signatures:
Forbidden Signatures:
Authorized TimeStamps:
OsRecovery Signatures:
Copyright © 2021, Diebold Nixdorf
01750345464A 8-40