
1. System Utilities
Express5800/R120h-1M, R120h-2M Maintenance Guide
110
Chapter 2 Useful Features
iv-1. Enroll Signatures
When you select
System Configuration
>
BIOS/Platform Configuration (RBSU)
>
Server Security
>
Secure
Boot Settings
>
Advance Secure Boot Options
>
DBX - Forbidden Signature Database
>
Enroll Signature
from the System Utilities, the
Enroll Signature
menu appears.
For details about the options, see the table below.
Option
Parameter
Description
Enroll Signature using
File
-
Enrolls the signature using a file.
Signature Owner GUID
(optional)
[Other]
Hewlett Packard Enterprise
Company
Hewlett-Packard Company
Microsoft Corporation
SUSE Linux Products HmbH
Select the Signature Owner to use their Signature
GUID in the Certificate.
Signature GUID
(optional)
String of 32 digits (“0” to “9”) and
alphabetic characters “A” to “F”
Enter the optional security certificate Signature
GUID. You must enter the data in the following
GUID format:
11111111-2222-3333-4444-1234567890ab.
For
Hewlett Packard Enterprise certificates, enter
1E910BE1-4BEB-6337-19F1-8A8AC107D512.
For
Hewlett-Packard certificates, enter
F5A96B31-DBA0-4faa-A42A-7A0C9832768E.
For
Microsoft certificates, enter
77fa9abd-0359-4d32-bd60-28f4e78f784b.
For
SUSE certificates, enter
2879c886-57ee-45cc-b126-f92f24f906b9.
Signature Format
SHA256
SHA384
SHA512
[RAW]
Select the certicate format used to enroll certificate
into database. Ensure correct signature format
SHA256/SHA384/SHA512 is selected for the
certificate with EFI_CERT_X509_SHA*_GUID
signature type. For all other certificate types please
select RAW signature format.
Commit changes and
exit
-
Commit changes and exit.
Discard changes and
exit
-
Discard changes and exit
[ ]: Default setting
v.
DBT - Timestamp Signatures Database
When you select System Configuration > BIOS/Platform Configuration (RBSU) > Server Security > Secure Boot
Settings > Advance Secure Boot Options > DBT - Timestamp Signatures Database from the System Utilities, the
DBT - Timestamp Signatures Database menu appears.
For details about the options, see the table below.
Option
Parameter
Description
Enroll Signatures
-
Enrolls the signature.
Delete Signature
-
Deletes the enrolled signature.