NEC Express5800 Series - Page 110

1. System Utilities
Express5800/R120h-1E, R120h-2E Maintenance Guide
110
Chapter 2 Useful Features
iii-1.
Enroll Signatures
When you select System Configuration > BIOS/Platform Configuration (RBSU) > Server Security > Secure
Boot Settings > Advance Secure Boot Options > DB - Allowed Signatures Database > Enroll Signature from
the System Utilities, the Enroll Signature menu appears.
For details about the options, see the table below.
Option Parameter Description
Enroll Signature using File
-
Enrolls the signature using a file.
Signature Owner GUID
(optional)
[Other]
Hewlett Packard Enterprise
Company
Hewlett-Packard Company
Microsoft Corporation
SUSE Linux Products HmbH
Select the Signature Owner to use their Signature
GUID in the Certificate.
Signature GUID (optional) String of 32 digits (“0” to “9”) and
alphabetic characters “A” to “F”
Enter the optional security certificate Signature
GUID. You must enter the data in the following GUID
format:
11111111-2222-3333-4444-1234567890ab. For
Hewlett Packard Enterprise certificates, enter
1E910BE1-4BEB-6337-19F1-8A8AC107D512. For
Hewlett-Packard certificates, enter
F5A96B31-DBA0-4faa-A42A-7A0C9832768E. For
Microsoft certificates, enter
77fa9abd-0359-4d32-bd60-28f4e78f784b. For
SUSE certificates, enter
2879c886-57ee-45cc-b126-f92f24f906b9.
Commit changes and exit
-
Commit changes and exit.
Discard changes and exit
-
Discard changes and exit.
[ ]: Default setting
iv.
DBX - Forbidden Signatures Database
When you select System Configuration > BIOS/Platform Configuration (RBSU) > Server Security > Secure
Boot Settings > Advance Secure Boot Options > DBX - Forbidden Signatures Database from the System
Utilities, the DBX - Forbidden Signatures Database menu appears.
For details about the options, see the table below.
Option
Parameter Description
View Signatures
-
Shows the hash value of the currently registered
DBX.
Enroll Signatures
-
Adds a DBX.
Delete Signature
-
Deletes the enrolled signatures.
Export Signature
-
Use this option to export the signature to a file on an
attached media device. Supported formats
include .der, .cer, and .crt.
Reset to platform defaults
-
Resets the DBX key to the platform default.