Security Menu - Seco SBC ADLER User Manual

4.5 Security menu

Menu Item Options
Setup Administrator Password
User Password
Secure Boot See Submenu
4.5.1 Secure Boot submenu
Menu Item Options
Secure Boot Enabled / Disabled
Secure Boot Customization Standard / Custom
Restore Factory Keys
Key management See submenu
4.5.1.1
Key Management submenu
Menu Item Options
Factory Keys Provision Enabled / Disabled
Restore Factory Keys
File System Image
Enroll Efi Image
Restore DB defaults
Platform key (PK)
Key Exchange Keys
Authorized Signatures Set New Var
Forbidden Signatures Append Key
Authorized Timestamps
OS Recovery Signatures
ADLER
ADLER User Manual - Rev. First Edition: 1.0 - Last Edition: 1.2 - Author: A.R./S.B. - Reviewed by M.B. Copyright © 2022 SECO S.p.A.
Description
Set Setup Administrator Password
Set User Password
Customizable Secure Boot Settings
Description
Secure Boot is activated when the Platform Key (PK) is enrolled, System Mode is User/Deployed and CSM function is disabled.
Set UEFI Secure Boot Mode to STANDARD Mode or CUSTOM mode. This change will be effective after save. And after reset,
the mode will return to Standard
Active only when "Secure Boot Customization" is set to Custom. Force System to User Mode. Configure NVRAM to contain
OEM-defined factory default Secure Boot keys
Enable expert users to modify Secure Boot Policy variables without full authentication
Description
Provision factory default keys on next re-boot only when System in Setup Mode
Force System to User Mode. Configure NVRAM to contain OEM- defined factory default Secure Boot keys
Run selected image in Secure Boot mode. Enrol SHA256 Hash Certificates of image into Authorized Signature Database
Restore DB variable to factory defaults
Enrol factory Defaults or load certificates from a file:
1. Public Key Certificate in:
a) EFI_SIGNATURE_LIST
b) EFI_CERT_X509 (DER encoded)
c) EFI_CERT_RSA2048 (bin)
d) EFI_CERT_SHA256,384,512
2. Authenticated UEFI variables
3. EFI PE/COFF Image (SHA256), Key Source: Factory, External, Mixed
61