TYAN TS75-B8252 - Page 219

http://www.tyan.com
219
Remove‘UEFI CA’from DB
Device Guard ready system must not list ‘Microsoft UEFI CA’ Certificate in
Authorized Signature database (db)
Restore DB defaults
Restore DB variable to factory defaults
Platform Key(PK)
Enroll Factory Defaults or load certificates from a file:
1. Public Key Certificate in:
a)EFI_signature_LIST
b)EFI_CERT_X509 (DER encoded)
c)EFI_CERT_RSA2048(bin)
d)EFI_CERT_SHA256,384,512
2.Autheticated UEFI Variable
3.EFI PE/COFF Image (SHA256)
Key Source:
Default, External, Mixed, Test
Save to File / Set New / Erase
Key Exchange Keys
Enroll Factory Defaults or load certificates from a file:
1. Public Key Certificate in:
a)EFI_signature_LIST
b)EFI_CERT_X509 (DER encoded)
c)EFI_CERT_RSA2048(bin)
d)EFI_CERT_SHA256,384,512
2.Autheticated UEFI Variable
3.EFI PE/COFF Image (SHA256)
Key Source:
Default, External, Mixed, Test
Save to File / Set New / Append / Erase
Authorized Signatures
Enroll Factory Defaults or load certificates from a file:
1. Public Key Certificate in:
a)EFI_signature_LIST
b)EFI_CERT_X509 (DER encoded)
c)EFI_CERT_RSA2048(bin)
d)EFI_CERT_SHA256,384,512
2.Autheticated UEFI Variable
3.EFI PE/COFF Image (SHA256)
Key Source:
Default, External, Mixed, Test
Save to File / set New / Append / Erase
Forbidden Signatures
Enroll Factory Defaults or load certificates from a file: