HPE ProLiant Gen9

a. Select Signature GUID (optional) and press Enter.
b. Enter an ID and press Enter. Use the following GUID format (36 characters):
11111111-2222-3333-4444-1234567890ab.
• For Hewlett Packard Enterprise certificates, enter F5A96B31-DBA0-4faa-A42A-7A0C9832768E
• For Microsoft certificates, enter 77fa9abd-0359-4d32-bd60-28f4e78f784b
• For SUSE certificates, enter 2879c886-57ee-45cc-b126-f92f24f906b9
5. Select Commit changes and exit.
Delete Platform Key (PK)
Use this option to delete a PK certificate.
NOTE:
Deleting the Platform Key forces Secure Boot to be disabled until you enroll a new PK.
Deleting a PK certificate
Procedure
1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Server Security > Secure Boot Settings > Advanced Secure Boot Options > Platform Key
(PK) Options > Delete Platform Key (PK) and press Enter.
2. Select a key from the list and press Enter.
3. Press Enter to delete the key.
Key Exchange Key (KEK) Options
• Enroll KEK Entry
• Delete KEK Entry
Enroll KEK Entry
Use this option to enroll a Key Exchange Key certificate. The Key Exchange Key protects the signature
database from unauthorized modifications. No changes can be made to the signature database without the
private portion of this key.
Enrolling a KEK certificate
Procedure
1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Server Security > Secure Boot Settings > Advanced Secure Boot Options > Key
Exchange Key (KEK) Options > Enroll KEK Entry and press Enter.
2. Select Enroll KEK using File and press Enter.
Delete Platform Key (PK) 101