HP Sure Recover User's Guide
Start-Sleep -Seconds 3
$p = New-HPSureRecoverDeprovisionPayload `
-SigningKeyPassword $skpw `
-SigningKeyFile "$path\sk.pfx "
$p | Set-HPSecurePlatformPayload
Start-Sleep -Seconds 3
Write-host 'Deprovisioning P21'
$p = New-HPSecurePlatformDeprovisioningPayload `
-verbose `
-EndorsementKeyPassword $pw `
-EndorsementKeyFile "$Path\kek.pfx "
$p | Set-HPSecurePlatformPayload
Write-Host 'Final secure platform state':
Get-HPSecurePlatformState
{
OpenSSL
.
. 2048 0x10001 .
.
:
set OPENSSL_CONF=<path>\openssl.cnf
# CA
openssl req -sha256 -nodes -x509 -newkey rsa:2048 -keyout ca.key -out
ca.crt -subj
/"C=US/ST=State/L=City/O=Company/OU=Org/CN=www.example.com“
#
openssl req -sha256 -nodes -newkey rsa:2048 -keyout kek.key -out kek.csr -
subj
/"C=US/ST=State/L=City/O=Company/OU=Org/CN=www.example.com“
openssl x509 -req -sha256 -in kek.csr -CA ca.crt -CAkey ca.key -
CAcreateserial -out kek.crt
OpenSSL ١٤