Reference Guide

Synopsis
• To view the installed Secure Boot Certificates
racadm bioscert view –all
• To export the Secure Boot Certificate to a remote share or local system.
racadm bioscert view -t <keyType> -k <KeySubType> -v <HashValue or
ThumbPrintValue>
•
racadm bioscert export -t <keyType> -k <KeySubType> -v <HashValue or
ThumbPrintValue> -f <filename> -l <CIFS/NFS/HTTP/HTTPS share> -u <username>
-p <password>
• racadm bioscert import -t <keyType> -k <KeySubType> -f <filename> -l
<CIFS/NFS/HTTP/HTTPS share> -u <username> -p <password>
• racadm bioscert delete –all
• racadm bioscert delete -t <keyType> -k <KeySubType> -v <HashValue or
ThumbPrintValue>
• racadm bioscert restore –all
• racadm bioscert restore -t <keyType>
Input
• -t— Specifies the key type of the Secure Boot Certificate to be exported.
• 0— Specifies the PK (Platform Key)
• 1— Specifies the KEK (Key Exchange Key)
• 2— Specifies the DB (Signature Database)
• 3— Specifies the DBX (Forbidden signatures Database)
•
-k — Specifies the Certificate type or the Hash type of the Secure Boot Certificate file to be exported.
• 0— Specifies the Certificate type
• 1— Specifies the Hash type (SHA - 256)
• 2— Specifies the Hash type (SHA - 384)
• 3— Specifies the Hash type (SHA - 512)
• -v— Specifies the Thumbprint value or the Hash value of the Secure Boot Certificate file to be
exported.Filename of the exported.
• -f—Specifies the file name of the exported Secure Boot Certificate.
• -l—Specifies the network location to where the Secure Boot Certificate file must be exported.
• -u—Specifies the username for the remote share to where the Secure Boot Certificate file must be exported.
• -p—Specifies the password for the remote shre to where the Secure Boot Certificate file must be exported.
44 RACADM Subcommand Details