Vendor Keys - Advantech SOM-6872 User Manual

3.6.2

Vendor Keys

Factory Key Provision

Install factory default secure boot keys after the platform reset and while the
system is in setup mode
Restore Factory Keys

Force system to user mode. Install factory default secure boot key databases
Reset To Setup Mode

Delete all secure boot key databases from NVRAM
Export Secure Boot variables

Copy NVRAM content of secure boot variables to files in a root folder on a file
system device
Enroll Efi Image

Allow the image to run in secure boot mode. Enroll SHA256 hash certificate of a
PE image into authorized signature database(db)
Remove 'UEFI CA' from DB

Device guard ready system must not list "Microsoft UEFI CA" certificate in
authorized signature database(db)
Restore DB defaults

Restore DB variable to factory defaults
SOM-6872 User Manual
Figure 3.45 Vendor keys screen
62