NEC Express5800 Series Maintenance Manual page 108

Chapter 2 Useful Features
i. PK - Platform Key Menu
When you select System Configuration > BIOS/Platform Configuration (RBSU) > Server Security > Secure
Boot Settings > Advance Secure Boot Options > PK - Platform Key from the System Utilities, the SPK -
Platform Key menu appears.
For details about the options, see the table below.
Option
View PK Entry
Enroll PK
Delete PK
Export PK Entry
Reset to platform defaults
ii. KEK - Key Exchange Key Menu
When you select System Configuration > BIOS/Platform Configuration (RBSU) > Server Security > Secure
Boot Settings > Advance Secure Boot Options > KEK - Key Exchange Key from the System Utilities, the KEK -
Key Exchange Key menu appears.
For details about the options, see the table below.
Option
View KEK Entry
Enroll KEK Entry
Delete KEK Entry
Export KEK Entry
Reset to platform defaults
108
Parameter
-
-
-
-
-
Parameter
-
-
-
-
-
Important
Changing the default security certificate from the Delete Key Entry option
may cause the system to fail to boot from some devices or cause it to fail to
launch some software such as EXPRESSBUILDER.
Express5800/R120h-1E, R120h-2E Maintenance Guide
Description
Use this option to list and view Platform Key (PK) entry.
The expiration date of the certificate is shown in
Coordinated Universal Time (UTC).
Use this option to enroll a new Platform Key (PK). Only
one PK can exist in the system. If a PK already exists,
you must delete it before you can enroll a new PK. A
valid PK must be present for Secure Boot to be
enabled.
Use this option to delete the Platform Key (PK). Doing
so requires an immediate system reboot and disables
Secure Boot until you enroll a new PK.
Changing the default security certificate may cause this
server to fail to boot from some devices or cause it to
fail to launch some
EXPRESSBUILDER.
Use this option to download Active Health Log.
Use this option to export the PK certificate to a file on
an attached media device. Supported formats
include .der, .cer, and .crt.
Resets the PK key to the platform default.
Description
Use this option to list and view Key Exchange Key
(KEK) entries.
The expiration date of the certificate is shown in
Coordinated Universal Time (UTC).
Use this option to enroll a new entry in the Key
Exchange Key (KEK) security database.
Use this option to delete a new entry in the Key
Exchange Key (KEK) security database.
Use this option to export the KEK certificate to a file on
an attached media device. Supported formats
include .der, .cer, and .crt.
Restores the KEK settings to the default parameters.
1. System Utilities
software such as