HP ProDesk 400 G7 SFF Maintenance And Service Manual page 93

Table 6-3 Computer Setup—Advanced (for advanced users) (continued)
Option
Secure Boot Configuration
ENWW
Heading
Configure Legacy Support and Secure Boot
Lets you turn off all legacy support on the computer, including booting to DOS, running legacy graphics
cards, booting to legacy devices, and so on.
Lets you be sure that an operating system is legitimate before booting to it, making Windows resistant to
malicious modification from preboot to full operating system booting, preventing firmware attacks. UEFI and
Windows Secure Boot only allow code signed by preapproved digital certificates to run during the firmware
and OS boot process.
Legacy Support Enable and Secure Boot Disable
●
Legacy Support Disable and Secure Boot Enable
●
Legacy Support Disable and Secure Boot Disable
●
Default is Legacy Support Disable and Secure Boot Disable.
Secure Boot Key Management
Lets you manage the custom key settings.
Import Custom Secure Boot keys
Default is disabled.
Clear Secure Boot Keys
Lets you delete any previously loaded custom boot keys. Clearing keys will disable secure boot. Default is
disabled.
Reset Secure Boot keys to factory defaults
Default is disabled.
Enable MS UEFI CA key
Disabling this setting alters the Secure Boot key list to further restrict the allowed software components. Set
this option to disable to support Device Guard.
Ready BIOS for Device Guard Use
Requires BIOS Administrator password to be configured and Secure Boot to be enabled.
Computer Setup—Advanced 85