Community
cancel
Showing results for 
Search instead for 
Did you mean: 
BBen1
Beginner
1,302 Views

Secure Boot PK Key change with S2600CWTR?

Hallo,

i try to install my own Secure Boot PK Cert but dont can find an way to remove the

pre installed. So Secure Boot runs in User Mode and i cant get in Setup Mode.

Is there a way to remove the PK key oder get Secure Boot into Setup Mode?

What i found is that some Intel Boards have the Bios Menu entry to set Secure Boot Mode to Custome but this dont.

With Keytools i dont can remove the installed PK without an auth file that i dont have.

And can i even prove that this PK is really from Intel?

Used last Updates:

BIOS ID : SE5C610.86B.01.01.0016.033120161139

BMC FW Rev : 1.43.9685

Boot FW Rev : 1.07

SDR Package Version : SDR Package 1.13

Mgmt Engine (ME) FW Rev : 03.01.03.021

Product Name : S2600CWR

Part/Model Number : H12882-260

On Board Installed: TPM AXXTPME5 (but not active)

Bios Options

Keytool

0 Kudos
5 Replies
idata
Community Manager
56 Views

Hello,

 

 

Thank you for contacting Intel Customer Support.

 

 

We will check on this and try to find a solution for you, as soon as we have our results we will get back to you.

 

 

faugub_intel # iwork4intel
BBen1
Beginner
56 Views

Thanks, would be nice to find a solution.

If you need more information or i shoud test something, let me know.

idata
Community Manager
56 Views

Hello,

 

 

After further investigation, we can confirm that it is not possible to remove the pre installed secure boot. Also, the PK comes from Intel.

 

 

faugub_intel # iwork4intel
BBen1
Beginner
56 Views

Hallo,

ok thats a major drawback for me, will that get a fix?

Otherwise is this now standard?

Test multiple times Secure Boot with custom PK cert and that works realy nice. (on other Systems)

Sincerely

idata
Community Manager
56 Views

Hello,

 

 

There are not any announcement about it for these products. This might be added on future releases. However, by now it is not supported.

 

 

faugub_intel # iwork4intel
Reply