![background image](http://html1.mh-extra.com/html/nec/express5800-r120g-1e/express5800-r120g-1e_maintenance-manual_3971611091.webp)
1. System BIOS
Express5800/R120g-1E Maintenance Guide
91
Chapter 2 Useful Features
(a)
Key
Management
submenu
Option Parameter
Description
Provision Factory Default
keys
Disabled
[Enabled]
Enable or disable the function
to automatically
register the default key
if you do not have Platform
Key (PK).
Delete All Secure Boot
Variables
-
Sets
System Mode
to [Setup]. In that case,
SecureBoot
is disabled. All keys and signature
databases (PK, KEK, DB, DBX, and DBT) are
deleted. This option can be executed only when
Default Key Provision
is set to [Disabled]
.
Enroll All Factory Default Keys
-
Sets
System Mode
to [User].
Default
keys and
signature databases (PK, KEK, DB, DBX, and
DBT) are registered. This option can be executed
only when
Default Key Provision
is set to
[Enabled].
Save All Secure Boot
Variables
-
All keys and signature databases
(PK
,
KEK
,
DB
,
DBX
, and
DBT)
are saved in the external media.
This option can be executed only when the PK,
KEK,
db, dbx, and dbt keys have been registered.
Secure Boot variable | Size|
Key#| Key source
(Display only)
Displays the status of keys and signature
databases (PK, KEK, DB, DBX, and DBT).
Platform Key(PK)
-
Displays the status of the Platform Key (PK). In
addition, registers/deletes PK.
Key Exchange Keys
-
Displays the status of Key Exchange Keys (KEK).
In addition, registers/deletes KEK.
Authorized Signatures
-
Displays the status of Authorized Signatures (BD).
In addition, registers/deletes DB.
Forbidden Signatures
-
Displays the status of Forbidden Signatures
(DBX). In addition, registers/deletes DBX.
Authorized Timestamps
-
[ ]: Factory setting
Summary of Contents for Express5800/R120g-1E
Page 223: ...MEMO...