TYAN S5642 Manual page 147

Remove 'UEFI CA' from DB
Device Guard ready system must not list ' Microsoft UEFI CA' Certificate in
Authorized Signature database(db).
Restore DB defaults
Restore DB variable to factory defaults
Platform Key (PK)
Enroll Factory Defaults or load certificates from a file:
1. Public Key Certificate in:
a) EFI_SIGNATURE_LIST
b) EFI_CERT_X509 (DER encoded)
c) EFI_CERT_RSA2048 (bin)
d) EFI_CERT_SHA256, 384, 512 (bin)
2. Authenticated UEFI Variable
3. EFI PE/C0FF Image (SHA256)
Key source: Default, External, Mixed, Test
Details / Export / Update / Delete
Key Exchange Keys
Enroll Factory Defaults or load certificates from a file:
1. Public Key Certificate in:
a) EFI_SIGNATURE_LIST
b) EFI_CERT_X509 (DER encoded)
c) EFI_CERT_RSA2048 (bin)
d) EFI_CERT_SHA256, 384, 512 (bin)
2. Authenticated UEFI Variable
3. EFI PE/C0FF Image (SHA256)
Key source: Default, External, Mixed, Test
Details / Export / Update / Append / Delete
Authorized Signatures
Enroll Factory Defaults or load certificates from a file:
1. Public Key Certificate in:
a) EFI_SIGNATURE_LIST
b) EFI_CERT_X509 (DER encoded)
c) EFI_CERT_RSA2048 (bin)
d) EFI_CERT_SHA256, 384, 512 (bin)
2. Authenticated UEFI Variable
3. EFI PE/C0FF Image (SHA256)
Key source: Default, External, Mixed, Test
Details / Export / Update / Append / Delete
147
http://www.tyan.com