TYAN S8030, Manual

Page: 122 / 152

http://www.tyan.com
122
Enroll Efi Image
Allow the image to run in Secure Boot mode. Enroll SHA256 Hash certificate of a
PE image into Authorized Signature Database (db).
Remove ‘UEFI CA’ from DB
Device Guard ready system must not list ‘Microsoft UEFI CA’ Certificate in
Authorized Signature database (db).
Press ‘Yes’ to proceed ‘No’ to cancel.
Restore DB defaults
Restore DB variable to factory defaults.
Press ‘Yes’ to proceed ‘No’ to cancel.
Platform Key (PK)
Enroll Factory Defaults or load certificates from a file:
1. Public Key Certificate in:
a) EFI_SIGNATURE_LIST
b) EFI_CERT_X509 (DER)
c) EFI_CERT_RSA2048 (bin)
d) EFI_CERT_SHAXXX
2. Authenticated UEFI Variable
3. EFI PE/C0FF Image (SHA256)
Key source: Factory, External, Mixed
Details / Export / Update / Delete
Key Exchange Keys
Enroll Factory Defaults or load certificates from a file:
1. Public Key Certificate in:
a) EFI_SIGNATURE_LIST
b) EFI_CERT_X509 (DER)
c) EFI_CERT_RSA2048 (bin)
d) EFI_CERT_SHAXXX
2. Authenticated UEFI Variable
3. EFI PE/C0FF Image (SHA256)
Key source: Factory, External, Mixed
Details / Export / Update / Append / Delete
Authorized Signatures
Enroll Factory Defaults or load certificates from a file:
1. Public Key Certificate in:
a) EFI_SIGNATURE_LIST
b) EFI_CERT_X509 (DER)
c) EFI_CERT_RSA2048 (bin)
d) EFI_CERT_SHAXXX
2. Authenticated UEFI Variable
3. EFI PE/C0FF Image (SHA256)
Key source: Factory, External, Mixed