4 Replies Latest reply on May 2, 2017 12:07 AM by rguevara

NUC5i7RYH - how to install own certificate for secure boot?

DDom Mar 22, 2017 9:06 AM

Hi,

I am using a NUC5i7RYH and I want to install own certificates for the secure boot feature. The problem is I have no idea how to add my own certificates. I was able to active the secure boot feature and to set it into custom mode. Usually, the BIOS should offer a option to install your own KEK, PUB etc. But this option, if it is available, is not showing up in the Visual BIOS of intel. I haven't found any documentation related to this topic for the Intel NUC.

Does somebody has an idea how to install your own certificates/key material on the intel NUC?

I have installed the newest BIOS version .0363

1. Re: NUC5i7RYH - how to install own certificate for secure boot?

Mar 22, 2017 4:07 PM (in response to DDom)

This message was posted on behalf of Intel Corporation

Hello DDom,

Thank you for contacting Intel Communities.

Please check the link below for information about Secure Boot Key Creation:

https://technet.microsoft.com/en-us/library/dn747883.aspx

NOTE: This link is being offered for your convenience and should not be viewed as an endorsement by Intel of the content, products, or services offered there.

Hope this information helps.

Please don't hesitate in replying to this post if you need further assistance.

Regards,
Juan Carlos
Like Show 0 Likes(0)

Actions
2. Re: NUC5i7RYH - how to install own certificate for secure boot?

DDom Mar 23, 2017 7:36 AM (in response to Intel Corporation)

Hi Juan,

thanks for your reply, but this page doesn't help me. I want to install on the NUC the PKpub, KEK, etc. But the BIOS doesn't give me any possibility to do so.

I basically watched a video from intel -> Practical UEFI Secure Boot: Part 1 of 3 (2:40) which shows you how to add your own keys. Unfortunately, this is a intel DQ57TM board and not a NUC. But the point is, that this board offers you the possibility to add new keys within the BIOS under the Secure Boot configuration.

The NUC on the other side looks like this:

Meaning there is no option to install any keys. Even clicking on Plattform Key, KEK, db doesn't open any window to install certificates. The option "Install Intel Platform Key" only installs the keys which are shipped with the NUC.

Do you have an idea how to add a PKpub, KEK, db to the NUC.

D
Like Show 0 Likes(0)

Actions
3. Re: NUC5i7RYH - how to install own certificate for secure boot?

Mar 23, 2017 2:36 PM (in response to DDom)

This message was posted on behalf of Intel Corporation

Hello DDom,

Let me do some research on this and I will update this thread once I have further information.

Regards,
Juan Carlos
Like Show 0 Likes(0)

Actions
4. Re: NUC5i7RYH - how to install own certificate for secure boot?

rguevara May 2, 2017 12:07 AM (in response to DDom)

Hello DDom,

I work for Intel Customer Support and I just have confirmation that this feature is not available in current NUC family. Visual and Core BIOS must be modified to add this to the NUC product. Intel is assessing the possibility to add this in future NUC product but existing products will stay as it is due to the complexity.

Regards,
Ronny G
Like Show 0 Likes(0)

Actions

Go to original post