Advertisement
Chapter 4: BIOS Setup
Key Management
Factory Key Provision
Install factory default secure boot keys after the platform reset and while the
system is in setup mode.
Restore Factory Keys
Force system to user mode. Install factory default secure boot key databases.
Enroll Efi Image
Allow Efi image to run in Secure Boot mode. Enroll SHA256 Hash certificate
of a PE image into Authorized Signature Database (db).
Copyright © 2020 NEXCOM International Co., Ltd. All Rights Reserved.
Secure boot variable
Include the size, keys, and key source of the following:
•
Platform Key (PK)
•
Key Exchange Keys (KEK)
•
Authorized Signatures (db)
•
Forbidden Signatures (dbx)
•
Authorized Time Stamps (dbt)
•
OsRecovery Signatures (dbr)
Enroll factory defaults or load certificates from a file:
1. Public Key Certificate:
a) EFI_SIGNATURE_LIST
b) EFI_CERT_X509 (DER)
c) EFI_CERT_RSA2048 (bin)
d) EFI_CERT_SHAXXX
2. Authenticated UEFI Variable
3. EFI PE/COFF Image (SHA256)
Key Source: Factory, Modified, Mixed
55
NSA 3200 User Manual
Advertisement
Need help?
Do you have a question about the NSA 3200 and is the answer not in the manual?
Questions and answers