TYAN S7067, User Manual

Page: 92 / 120

http://www.tyan.com
92
1.6.1.2 Key Management
Factory Default Key Provisioning
Install Factory default Secure Boot Keys when System is in Setup Mode.
Disabled /
Enabled
Install All Factory Default Keys
Force System to Setup Mode – install all Factory Default Keys (PK, KEK, db, dbx).
Change takes effect after reboot.
Save All Secure Boot Variables
Store content of each Secure Boot Variable (data formatted as
EFI_SIGNATURE_LIST) to a file with matching name on selected file system’s root
folder.
Delete PK
Delete the Variable from NVRAM. Removing PK will reset System to Setup Mode.
Save new PK
Insert factory default key(s) or load a file formatted as 1. EFI Variable as Time-
Based Authenticated Header or 2. Key Certificate list starting with
EFI_SIGNATURE_LIST Header or Single Key Certificate in X509_DER,
RSA2048_DER or SHA256_BIN format.