HP Sure Recover User Guide

Get-HPSecurePlatformState

}

finally {

Write-Host 'Deprovisioning Sure Recover'

Start-Sleep -Seconds 3

$p = New-HPSureRecoverDeprovisionPayload `

-SigningKeyPassword $skpw `

-SigningKeyFile "$path\sk.pfx"

$p | Set-HPSecurePlatformPayload

Start-Sleep -Seconds 3

Write-host 'Deprovisioning P21'

$p = New-HPSecurePlatformDeprovisioningPayload `

-verbose `

-EndorsementKeyPassword $pw `

-EndorsementKeyFile "$Path\kek.pfx"

$p | Set-HPSecurePlatformPayload

Write-Host 'Final secure platform state:'

Get-HPSecurePlatformState

}

使用 OpenSSL 生成示例密钥

将私人密钥存放在安全的位置。公共密钥将用于验证，而且必须在配置期间提供。这些密钥的长度必

须为 2048 位，而且必须使用 0x10001 的指数。用贵组织的相关信息替换示例中的主题。

在继续操作之前，请先设置以下环境变量：

set OPENSSL_CONF=<path>\openssl.cnf

# Create a self-signed root CA certificate for testing

openssl req -sha256 -nodes -x509 -newkey rsa:2048 -keyout ca.key -out

ca.crt -subj

"/C=US/ST=State/L=City/O=Company/OU=Org/CN=www.example.com“

使用

OpenSSL 生成示例密钥