TYAN S5537 User Manual page 85

3.6.1.1 Key Management
Default Key Provision
Install Factory default Secure Boot Keys when System is in Setup Mode.
Disabled / Enabled
Enroll All Factory Default Keys
Force System to User Mode – install all Factory Default keys (PK, KEK, db, dbx,
dbt). Change takes effect after reboot.
Save All Secure Boot Variables
Store content of each Secure Boot Variable (data formatted as
EFI_SIGNATURE_LIST) to a file with matching name on selected file system's root
folder.
Delete PK
Delete the Variable from NVRAM. Removing PK will reset System to Setup Mode.
Save new PK
Insert factory default key(s) or load a file formatted as 1. EFI Variable as Time-
Based Authenticated Header or 2. Key Certificate list starting with
EFI_SIGNATURE_LIST Header or Single Key Certificate in X509_DER,
RSA2048_DER or SHA256_BIN format.
85
http://www.tyan.com