Wiki Home Installation Import certificate with usb

Import certificate with usb

2025-03-10
diskless, boot, certificate,  uefi, secure boot

The following explains how to import a Youngzsoft certificate from a USB drive  either using the BIOS method or the MOK method (that doesn't require BIOS setup)

  1. Prepare an USB format in FAT32
  2. Download Youngzsoft v1 certificate - Used for IPXE.PXE
  3. Download Youngzsoft v2 certificate - Used for IPXE2025
  4. Those 2 certificates (are custom certificates created by our company)
  5. Copy / paste the file to the USB that doesn't include anything else.
  6. This certificate is essential for Secure Boot access.

The BIOS way

  1. Youngzsoft certificate V1 imports directly from BIOS and supports ipxe.pxe that has more compatibility with many Motherboards
  2. Plug in the USB on the client PC
  3. Navigate to the Boot page, select the PC you want to boot, then click Edit. Scroll down to the PXE section and choose ipxe.pxe. (Figure 1)

Figure 1

  1. The methods to directly import in Bios are : MSI , Gigabyte , Asus , Asrock

The MOK way

  1. Youngzsoft certificate V2 imports through Mok management and works exclusively with PXE2025 as specified below
  2. Plug in the USB on the client PC
  3. Navigate to the Boot page, select the PC you want to boot, then click Edit. Scroll down to the PXE section and choose IPXE2025 (UEFI). (Figure 2)

Figure 1

  1. Next, boot the PC. If Secure Boot is enabled, the PXE boot screen may display a blue screen with the error "Verification Failed: Security Violation"
  2. This means that the certificate has not been imported. (Figure 2)

Figure 2

  1. Click OK, and the next page will appear with the MOK Management options:
    Continue Boot
    Enroll Key from Disk = Choose this option to import certificate from USB
    Enroll Hash from Disk (Figure 3)

Figure 3

  1. Enroll the Keys select YES (Figure 4)

Figure 4

  1. Next click continue (Figure 5)

Figure 5

  1. On select keys , locate the YoungzsoftV2.cer and click on it.(Figure 6)

Figure 6

  1. Finally, reboot the computer. (Figure 7)

Figure 7

Related: