Table of Contents
Advertisement
3.4.1 Key Management
In this section, expert users can modify Secure Boot Policy variables without full authenti-
cation.
Install Default Secure Boot Keys
Please install default secure boot keys if it's the first time you use secure boot.
Enroll Efi Image
Allow the image to run in Secure Boot mode. Enroll SHA256 hash of the binary into
Authorized Signature Database (db).
Export Secure Boot Variables
Copy NVRAM content of Secure Boot variables to files in a root folder on a file
system device.
Platform Key(PK)
Enroll Factory Defaults or load certificates from a file:
1. Public Key Certificate in:
a) EFI_SIGNATURE_LIST
b) EFI_CERT_X509 (DER encoded)
52
Advertisement
Table of Contents
