1. System Utilities
Express5800/R120h-1M, R120h-2M Maintenance Guide
107
Chapter 2 Useful Features
i.
PK - Platform Key
Menu
When you select
System Configuration
>
BIOS/Platform Configuration (RBSU)
>
Server Security
>
Secure
Boot Settings
>
Advance Secure Boot Options
>
PK - Platform Key
from the System Utilities, the
SPK -
Platform Key
menu appears.
For details about the options, see the table below.
Option
Parameter
Description
View PK Entry
-
Use this option to list and view Platform Key (PK) entry.
The expiration date of the certificate is shown in
Coordinated Universal Time (UTC).
Enroll PK
-
Use this option to enroll a new Platform Key (PK). Only
one PK can exist in the system. If a PK already exists,
you must delete it before you can enroll a new PK. A
valid PK must be present for Secure Boot to be
enabled.
Delete PK
-
Use this option to delete the Platform Key (PK). Doing
so requires an immediate system reboot and disables
Secure Boot until you enroll a new PK.
Changing the default security certificate may cause this
machine to fail to boot from some devices or cause it to
fail to launch some software such as
EXPRESSBUILDER.
Use this option to download Active Health Log.
Export PK Entry
-
Use this option to export the PK certificate to a file on
an attached media device. Supported formats
include .der, .cer, and .crt.
Reset to platform defaults
-
Resets the PK key to the platform default.
ii. KEK - Key Exchange Key
Menu
When you select
System Configuration
>
BIOS/Platform Configuration (RBSU)
>
Server Security
>
Secure
Boot Settings
>
Advance Secure Boot Options
>
KEK - Key Exchange Key
from the System Utilities, the
KEK -
Key Exchange Key
menu appears.
For details about the options, see the table below.
Option
Parameter
Description
View KEK Entry
-
Use this option to list and view Key Exchange Key
(KEK) entries.
The expiration date of the certificate is shown in
Coordinated Universal Time (UTC).
Enroll KEK Entry
-
Use this option to enroll a new entry in the Key
Exchange Key (KEK) security database.
Delete KEK Entry
-
Use this option to delete a new entry in the Key
Exchange Key (KEK) security database.
Export KEK Entry
-
Use this option to export the KEK certificate to a file on
an attached media device. Supported formats
include .der, .cer, and .crt.
Reset to platform defaults
-
Restores the KEK settings to the default parameters.
Important Changing the default security certificate from the Delete Key Entry option
may cause the system to fail to boot from some devices or cause it to fail to
launch some software such as EXPRESSBUILDER.