NEC Express5800/R120g-1E Maintenance Manual page 91

Chapter 2 Useful Features
(a) Key
Management
Option
Provision Factory Default
keys
Delete All Secure Boot
Variables
Enroll All Factory Default Keys
Save All Secure Boot
Variables
Secure Boot variable | Size|
Key#| Key source
Platform Key(PK)
Key Exchange Keys
Authorized Signatures
Forbidden Signatures
Authorized Timestamps
submenu
Parameter
Disabled
[Enabled]
－
－
－
(Display only)
－
－
－
－
－
Express5800/R120g-1E Maintenance Guide
Description
to automatically
Enable or disable the function
register the default key
if you do not have Platform
Key (PK).
Sets System Mode to [Setup]. In that case,
SecureBoot is disabled. All keys and signature
databases (PK, KEK, DB, DBX, and DBT) are
deleted. This option can be executed only when
Default Key Provision is set to [Disabled]
Sets System Mode to [User].
signature databases (PK, KEK, DB, DBX, and
DBT) are registered. This option can be executed
only when
Default Key Provision
All keys and signature databases
, and are saved in the external media.
DBX DBT)
This option can be executed only when the PK,
KEK,
db, dbx, and dbt keys have been registered.
Displays the status of keys and signature
databases (PK, KEK, DB, DBX, and DBT).
Displays the status of the Platform Key (PK). In
addition, registers/deletes PK.
Displays the status of Key Exchange Keys (KEK).
In addition, registers/deletes KEK.
Displays the status of Authorized Signatures (BD).
In addition, registers/deletes DB.
Displays the status of Forbidden Signatures
(DBX). In addition, registers/deletes DBX.
1. System BIOS
.
keys and
Default
is set to
[Enabled].
, , ,
(PK KEK DB
[ ]: Factory setting
91