TYAN S5549, Manual

Page: 109 / 135

http://www.tyan.com
109
Enroll Efi Image
Allow the image to run in Secure Boot mode. Enroll SHA256 Hash certificate of a
PE image into Autorized Signature Database (db)
Remove
‘UEFI CA’ from DB
Device Guard ready system must not list
‘ Microsoft UEFI CA’ Certificate in
Authorized Signature database (db)
Restore DB defaults
Restore DB variable to factory defaults
Platform Key (PK)
Set New Key
1. Public Key Certificate in:
a) EFI_SIGNATURE_LIST
b) EFI_CERT_X509 (DER encoded)
c) EFI_CERT_RSA2048 (bin)
d) EFI_CERT_SHA256 (bin)
2. Authenticated UEFI Variable
Key: Vendor, Custom, Mixed, Test
(*) modified from Setup menu
Set New Key
Append Key
Key Exchange Keys
Enroll factory Defaults or load the keys from a file with:
1. Public Key Certificate in:
a) EFI_SIGNATURE_LIST
b) EFI_CERT_X509 (DER encoded)
c) EFI_CERT_RSA2048 (bin)
d) EFI_CERT_SHA256 (bin)
2. Authenticated UEFI Variable
Key: Vendor, Custom, Mixed, Test
(*) modified from Setup menu
Set New Key
Append Key
Authorized Signatures
Enroll factory Defaults or load the keys from a file with:
1. Public Key Certificate in:
a) EFI_SIGNATURE_LIST
b) EFI_CERT_X509 (DER encoded)
c) EFI_CERT_RSA2048 (bin)
d) EFI_CERT_SHA256 (bin)
2. Authenticated UEFI Variable
Key: Vendor, Custom, Mixed, Test
(*) modified from Setup menu