TYAN S5556, Manual

Page: 105 / 134

http://www.tyan.com
105
Remove ‘UEFI CA’ DB
Device Guard ready system must not list ‘Microsoft UEFI CA’ Certificate in
Authorized Signature (db).
Press ‘Yes’ to proceed ‘No’ to cancel.
Restore DB defaults
Restore DB variable to factory defaults.
Press ‘Yes’ to proceed ‘No’ to cancel.
Platform Key (PK)
Enroll Factory Defaults or load certificates from a file:
1. Public Key Certificate:
a) EFI_SIGNATURE_LIST
b) EFI_CERT_X509 (DER)
c) EFI_CERT_RSA2048 (bin)
d) EFI_CERT_SHAXXX
2. Authenticated UEFI Variable
3. EFI EFI/COFF Image (SHA256)
Key source: Factory, External, Mixed
Update / Append
Key Exchange Keys
Enroll Factory Defaults or load certificates from a file:
1. Public Key Certificate:
a) EFI_SIGNATURE_LIST
b) EFI_CERT_X509 (DER)
c) EFI_CERT_RSA2048 (bin)
d) EFI_CERT_SHAXXX
2. Authenticated UEFI Variable
3. EFI EFI/COFF Image (SHA256)
Key source: Factory, External, Mixed
Update / Append
Authorized Signatures
Enroll Factory Defaults or load certificates from a file:
1. Public Key Certificate:
a) EFI_SIGNATURE_LIST
b) EFI_CERT_X509 (DER)
c) EFI_CERT_RSA2048 (bin)
d) EFI_CERT_SHAXXX
2. Authenticated UEFI Variable
3. EFI EFI/COFF Image (SHA256)
Key source: Factory, External, Mixed
Update / Append