49
Enroll Efi Image
This item allows the image to run in Secure Boot mode.
Enroll SHA256 Hash certificate of a PE image into Authorized Signature
Database (db).
Device Guard Ready
Remove ‘UEFI CA’ from DB
Restore DB default
This item restore DB variable to factory defaults.
Secure Boot variable/Size/Keys/Key Source
Platform Key(PK)/Key Exchange Keys/Authorized Signatures/Forbidden
Signatures/ Authorized TimeStamps/OsRecovery Signatures
Use this item to enroll Factory Defaults or load certificates from a file:
1. Public Key Certificate:
a) EFI_SIGNATURE_LIST
b) EFI_ CERT_X509 (DER)
c) EFI_ CERT_RSA2048 (bin)
d) EFI_ CERT_SHAXXX
2. Authenticated UEFI Variable
3. EFI PE/COFF Image (SHA256)
Key Source: Factory, External, Mixed.