User Manual

4-42
Chapter 4: BIOS Setup
Secure Boot
This item allows you to customize the Secure Boot settings.
Secure Boot [Disabled]
Secure Boot feature is Active if Secure Boot is set to
[Enabled]
,PlatformKey(PK)isenrolled
and the System is in User mode. Mode change requires a platform reset.
Congurationoptions:[Disabled][Enabled]
Secure Boot Mode [Custom]
Allows you to set the Secure Boot selector.
Congurationoptions:[Custom][Standard]
The following items are available only when
Secure Boot Mode
is set to
[Custom]
.
Install Default Secure Boot Keys
Thisoptionwillloadthedefaultsecurebootkeys,includingthePK(Platformkey),KEK(key-
exchangekey),db(signaturedatabase),anddbx(revokedsignaturedatabase).Allthe
securebootkeysstateswillchangefromunloadedtoloaded.Savechangesandresetthe
systemforthechangestotakeeffect.
Clear Secure Boot Keys
Thisoptionwilldeleteallpreviouslyappliedsecurebootkeys,includingthePK(Platformkey),
KEK(key-exchangekey),db(signaturedatabase),anddbx(revokedsignaturedatabase).All
thesecurebootkeysstateswillchangefromunloadedtoloaded.Savechangesandreset
thesystemforthechangestotakeeffect.
Key Management
This item only appears when the item
Secure Boot Mode
is set to
[Custom]
. The Key
Management item allows you to modify Secure Boot variables and set Key Management
page.