![Avnet COM Express MSC C6C-AL Скачать руководство пользователя страница 114](http://html.mh-extra.com/html/avnet/com-express-msc-c6c-al/com-express-msc-c6c-al_user-manual_3032967114.webp)
MSC C6C-AL
MSC C6C-AL User Manual
114 / 128
MSC Bios Editor Usage
Standard usage for creating a bios image with active signature verification:
1.
Open up the bios editor and load your bios image file.
2.
Click on the “Trusted Update” tab. If there is no “Trusted Update” tab, the currently loaded bios image does not support Trusted Update yet.
3.
Use the public key certificate “Add…” button to add your public key file to the bios. This public key will be used for checking bios image
signatures when this bios is running. Unsigned bios updates are only possible if this field is left blank. If there is a public key already present in the
bios image, the text on the button changes to “Replace…”.
4.
If you need to create a signature for this bios image, check the “Sign Image” checkbox. To create a signature, the editor will need access to
the private key. Use the personal information exchange file “Load…” button to point to your private key *.pfx file, and enter the required password into
the boxes below.
5.
Now save your bios image, and the bios file will be updated with the provided public key, and a signature for Trusted Update will be generated
and added to the bios image.
Example Usage: Switching from unsigned to signed updates
If your currently running bios has Trusted Update not enable yet, you only need to set a public key certificate. Since the currently running bios does
not include a public key for signature verification, it is not necessary to generate a signature for the first bios update. However, generating a signature
will not cause any problems.
Example Usage: Switching from signed to unsigned updates
It is possible to switch back to unsigned updates by generating a bios image which includes a valid signature, but no public key. The signature
ensures that the image can be updated by a bios which only accepts signed images, while the missing public key means that further bios updates do
not require a signature. You can remove an existing key from a bios image with the “Remove…” button on the “public key certificate” line.