Supermicro X11DSC+ User Manual page 118

Super X11DSC+ User's Manual
Secure Boot
This feature is available when the platform key (PK) is pre-registered where the platform
operates in the user mode and compatibility support module (CSM) support is disabled in
the BIOS Setup utility. Select Enabled for secure boot flow control. The options are Disabled
and Enabled.
Secure Boot Mode
This feature allows selection of the secure boot mode. The options are Standard and Custom.
Select Standard to load manufacturer's default secure variables. Selecting Custom allows
users to change the image execution policy and to manage secure boot keys.
CSM Support
Select Enabled to support the legacy Compatibility Support Module (CSM), which provides
compatibility support for traditional legacy BIOS for system boot. The options are Disabled
and Enabled.
Key Management
This submenu allows the user to configure the following Key Management settings.
Provision Factory Defaults
This feature allows provisioning the default secure boot keys set by the manufacturer when
system is in the setup mode. The options are Disabled and Enabled.
 Enroll all Factory Default Keys
Select Yes to install all default secure keys set by the manufacturer. The options are
Yes and No.
 Enroll Efi Image
This feature allows the image to run in the secure boot mode and the enroll of SHA256
hash of the binary into the Authorized Signature Database (DB).
 Save all Secure Boot variables
This feature allows the user to decide if all secure boot variables should be saved.
Secure Boot variable
 Platform Key (PK)
The Platform Key (PK), which is pre-installed in firmware during manufacturing, provides
full control of the secure boot key hierarchy. The options are Save to File, Set New, and
Erase.
: Size/ Key#/ Key Source
118