Supermicro X13SWA-TF User Manual page 136

Super X13SWA-TF User's Manual
Enroll Efi Image

This feature allows the Efi image to run in the secure boot mode, which will enroll the
SHA256 Hash certificate of a PE image into the Authorized Signature Database (DB).
Export Secure Boot Variables (Available when any secure keys
have been installed)
This feature exports the NVRAM contents of secure boot variables to a storage device.
The options are Yes and No.
Secure Boot variable / Size / Keys / Key Source
 Platform Key (PK)
Use this feature to enter and configure a set of values to be used as platform firmware
keys for the system. These values also indicate the sizes, keys numbers, and the sources
of the authorized signatures. Select Update to update the platform key.
Key Exchange Keys (KEK)
Use this feature to enter and configure a set of values to be used as Key-Exchange-Keys
for the system. These values also indicate the sizes, keys numbers, and the sources of
the authorized signatures. Select Update to update your "Key Exchange Keys". Select
Append to append your "Key Exchange Keys".
Authorized Signatures (db)
Use this feature to enter and configure a set of values to be used as Authorized Signatures
for the system. These values also indicate the sizes, keys numbers, and the sources of
the authorized signatures. Select Update to update your "Authorized Signatures". Select
Append to append your "Authorized Signatures".
Forbidden Signatures (dbx)
Use this feature to enter and configure a set of values to be used as Forbidden Signa-
tures for the system. These values also indicate sizes, key numbers, and key sources of
the forbidden signatures. Select Update to update your "Forbidden Signatures". Select
Append to append your "Forbidden Signatures".
136