Table of Contents
Advertisement
Appendix F: Secure Boot Settings
Key Exchange Key
The Key Exchange Key (KEK), which is held by the operating system vendor, can be
updated by the holder of the PK and be used by secure boot to protect access to sig-
natures databases. The options are Save to File, Set New, Append, and Erase. Select
Save to File to save the current KEKs to a FAT formatted USB flash drive. Select Set
New to load the manufacturer's defaults or load it from the external media. Select Erase
to clear the current KEKs. (Refer to pages 163, 164, and 165 for the Set New process.
Refer to page 166 for the Erase process.)
Append: Use the arrow keys to select Append.
167
Advertisement
Table of Contents
