Example: Enrolling a KEK entry
1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Server Security > Secure Boot Settings > Advanced Secure Boot Options > KEK - Key
Exchange Key > Enroll KEK entry.
2. Select Enroll KEK using file.
3. Select the location of the certificate file from an attached media device.
4. Optional: Select a Signature Owner GUID.
5. Optional: If you selected Other for the signature owner GUID, enter a Signature GUID.
6. Select Commit changes and exit.
Deleting a Secure Boot certificate key or database signature
Procedure
1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Server Security > Secure Boot Settings > Advanced Secure Boot Options.
2. Select an exchange key or a signatures database option.
3. Do one of the following:
• If there is one option available for deletion:
a. Select the Delete <option name> check box.
b. Click Yes.
• If there is more than one option available for deletion:
a. Select Delete <option name>.
b. Select the check box for the option you want to delete.
c. Click Yes.
Example: Deleting a KEK entry
1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Server Security > Secure Boot Settings > Advanced Secure Boot Options > KEK - Key
Exchange Key > Delete KEK entry.
2. Select the check box for the entry you want to delete.
3. Click Yes.
Deleting all keys
The Delete all keys option deletes all keys in the system, including the Platform Key.
110 Deleting a Secure Boot certificate key or database signature
To Next Page
Loading...
