BIOS Certificate

Check BIOS Options on the DUT. The DUT must be a Lenovo system with the Linux think-lmi driver loaded, and needs sudo.

Attribute	Type	Required	Default	Description
`cmd`	`const`	Yes	`bios certificate management`	Command Name
`name`	`string`	Yes		Name to uniquely identify the teststep. This name will show up in reports, logs and the WebUI
`transport`	`TransportObject`	Yes		Additional transport options
`options`	`OptionsObject`	No		Additional command options
`parameters`	`BIOS Certificate Options`	Yes		Options passed into BIOS Certificate

BIOS Certificate Options

Attribute	Type	Required	Description
`password`	`string`	Either of*	BIOS Password
`old_password`	`string`	Either of*	Old BIOS Password
`cert_path`	`string`	Either of*	BIOS Certificate
`key_path`	`string`	Either of*	BIOS Certificate Private Key
`serial`	`string`	Either of*	Serial number of device
`expect`	`BIOS Certificate Expect Options`	No	Array of expected BIOS Certificate Options

BIOS Certificate Expect Options

Attribute	Type	Required	Default	Description
`should_fail`	`bool`	No	`false`	Expect the firmware to refuse the operation. See Expecting a failure.

BIOS Certificate Example

- cmd: bios certificate management
  name: Enable certificate
  transport: *transport
  parameters:
    command: enable
    password: mypassword
    cert_path: /root/default-tools/system-suite/4k/new/cert.pem
- cmd: bios certificate management
  name: Check certificate thumbprint
  transport: *transport
  parameters:
    command: check
    cert_path: /root/default-tools/system-suite/4k/new/cert.pem
- cmd: bios certificate management
  name: Disable certificate
  transport: *transport
  parameters:
    command: disable
    key_path: /root/default-tools/system-suite/4k/new/key.pem
    password: mypassword
- cmd: bios certificate management
  name: Clear certificate
  transport: *transport
  parameters:
    command: clear
    key_path: /root/default-tools/system-suite/4k/new/key.pem
- cmd: bios certificate management
  name: Update password
  transport: *transport
  parameters:
    command: set-password
    old_password: mypassword
    password: mynewpassword