NEC Express5800 Series Maintenance Manual page 110

Chapter 2 Useful Features
iii-1. Enroll Signatures
When you select System Configuration > BIOS/Platform Configuration (RBSU) > Server Security > Secure
Boot Settings > Advance Secure Boot Options > DB - Allowed Signatures Database > Enroll Signature from
the System Utilities, the Enroll Signature menu appears.
For details about the options, see the table below.
Option
Enroll Signature using File
Signature Owner GUID
(optional)
Signature GUID (optional)
Commit changes and exit
Discard changes and exit
iv. DBX - Forbidden Signatures Database
When you select System Configuration > BIOS/Platform Configuration (RBSU) > Server Security > Secure
Boot Settings > Advance Secure Boot Options > DBX - Forbidden Signatures Database from the System
Utilities, the DBX - Forbidden Signatures Database menu appears.
For details about the options, see the table below.
Option
View Signatures
Enroll Signatures
Delete Signature
Export Signature
Reset to platform defaults
110
Parameter
-
[Other]
Hewlett Packard Enterprise
Company
Hewlett-Packard Company
Microsoft Corporation
SUSE Linux Products HmbH
String of 32 digits ("0" to "9") and
alphabetic characters "A" to "F"
-
-
Parameter
-
-
-
-
-
Express5800/R120h-1E, R120h-2E Maintenance Guide
Description
Enrolls the signature using a file.
Select the Signature Owner to use their Signature
GUID in the Certificate.
Enter the optional security certificate Signature
GUID. You must enter the data in the following GUID
format:
11111111-2222-3333-4444-1234567890ab. For
Hewlett Packard Enterprise certificates, enter
1E910BE1-4BEB-6337-19F1-8A8AC107D512. For
Hewlett-Packard certificates, enter
F5A96B31-DBA0-4faa-A42A-7A0C9832768E. For
Microsoft certificates, enter
77fa9abd-0359-4d32-bd60-28f4e78f784b. For
SUSE certificates, enter
2879c886-57ee-45cc-b126-f92f24f906b9.
Commit changes and exit.
Discard changes and exit.
[
Description
Shows the hash value of the currently registered
DBX.
Adds a DBX.
Deletes the enrolled signatures.
Use this option to export the signature to a file on an
attached media device. Supported formats
include .der, .cer, and .crt.
Resets the DBX key to the platform default.
1. System Utilities
]: Default setting