Fortec Star ET876 User Manual page 54

Keys
Reset To Setup
Mode
Key Management
Factory Key
Provision
Export Secure Boot
variables
Enroll Efi Image
Remove 'UEFI CA'
from DB
Remove DB
defaults
Platform Key (PK)
Key Exchange Key
Authorized
Signature
Forbidden Signature
Authorized
TimeStamps
OsRecovery
Signatures
44
contain OEM-defined factory default Security Boot
keys.
Delete NVRAM content of all UEFI Secure Boot key
databases.
Enables expert users to modify Secure Boot Policy
variables without full authentication.
Provision factory default keys on next re-boot only
when System in Setup Mode
Copy NVRAM content of Secure Boot variables to
files in a root folder on a file system device
Allow the image to run in Secure Boot mode. Enroll
SHA256 Hash certificate of a PE image into
Authorized Signature Database (db)
Device Guard ready system must not list 'Microsoft
UEFI CA' Certificate in Authorized Signature
database (db)
Restore DB variable to factory defaults
Enroll Factory Defaults or load certificates from a
file:
1.Public Key Certificate in:
a)EFI_SIGNATURE_LIST
b)EFI_CERT_X509 (DER encoded)
c)EFI_CERT_RSA2048 (bin)
d)EFI_CERT_SHA256,384,512
2.Authenticated UEFI Variable
3.EFI PE/COFF Image(SHA256) Key Source:
Factory,External,Mixed
ET876 Series User's Manual