User Manual

BIOS Setup

Secure Boot

Allows you to congure the Windows

Secure Boot settings and manage its keys to protect

the system from unauthorized access and malwares during POST.

OS Type [Other OS]

Allows you to select your installed operating system.

[Windows UEFI mode] This item allows you to select your installed operating system.

Execute the Microsoft

Secure Boot check. Only select this

option when booting on Windows

UEFI mode or other Microsoft

Secure Boot compliant OS.

[Other OS] Get the optimized function when booting on Windows

non-UEFI

mode. Microsoft

Secure Boot only supports Windows

UEFI

mode.

Key Management

This allows you to manage the Secure Boot keys.

Clear Secure Boot keys

This item appears only when you load the default Secure Boot keys. This item allows

you to clear all the previously applied Secure Boot keys.

Save Secure Boot variables

This item allows you to save all the Secure Boot keys to a USB storage device.

PK Management

The Platform Key (PK) locks and secures the rmware from any non-permissible

changes. The system veries the PK before your system enters the OS.

Save to File

This item allows you to save the downloaded PK to a USB storage device.

Set New Key

This item allows you to load the downloaded PK from a USB storage device.

The PK le must be formatted as a UEFI variable structure with time-based authenticated

variable.

Delete Key

This item allows you to delete the PK from your system. Once the PK is deleted,

all the system’s Secure Boot keys will not be active.

KEK Management

The KEK (Key-exchange Key or Key Enrollment Key) manages the Signature database

(db) and Revoked Signature database (dbx).

Key-exchange Key (KEK) refers to Microsoft

Secure Boot Key-Enrollment Key (KEK).

Save to File

Allows you to save the downloaded KEK to a USB storage device.

Set New Key

Allows you to load the downloaded KEK from a USB storage device.