IBASE Technology ET876 Series, Руководство пользователя

Страница: 52 / 64

44 ET876 Series
User’s Manual
Keys contain OEM-defined factory default Security Boot
keys.
Reset To Setup
Mode Delete NVRAM content of all UEFI Secure Boot key
databases.
Key Management
Enables expert users to modify Secure Boot Policy
variables without full authentication.
Factory Key
Provision Provision factory default keys on next re-boot only
when System in Setup Mode
Export Secure Boot
variables Copy NVRAM content of Secure Boot variables to
files in a root folder on a file system device
Enroll Efi Image Allow the image to run in Secure Boot mode. Enroll
SHA256 Hash certificate of a PE image into
Authorized Signature Database (db)
Remove ‘UEFI CA’
from DB
Device Guard ready system must not list 'Microsoft
UEFI CA' Certificate in Authorized Signature
database (db)
Remove DB
defaults Restore DB variable to factory defaults
Platform Key (PK)
Key Exchange Key
Authorized
Signature
Forbidden Signature
Authorized
TimeStamps
OsRecovery
Signatures
Enroll Factory Defaults or load certificates from a
file:
1.Public Key Certificate in:
a)EFI_SIGNATURE_LIST
b)EFI_CERT_X509 (DER encoded)
c)EFI_CERT_RSA2048 (bin)
d)EFI_CERT_SHA256,384,512
2.Authenticated UEFI Variable
3.EFI PE/COFF Image(SHA256) Key Source:
Factory,External,Mixed