Table of Contents
Advertisement
Appendix F: Secure Boot Settings
Key Exchange Key
The Key Exchange Key (KEK), which is held by the operating system vendor, can be
updated by the holder of the PK and be used by secure boot to protect access to signa-
tures databases. The options are Details, Export, Update, Append, and Delete. Select
Details to display detailed information of KEKs. Select Export to save the current KEKs
to a FAT formatted USB flash drive. Select Update to load the factory defaults or load
KEKs from a file on the external device. Select Append to load the factory defaults or
load KEKs from a file on the external device. Select Delete to clear the current KEKs or
to delete only one certificate from the key database. (Refer to page 218 for the Export
process. Refer to pages 219, 220, 221, and 222 for the Update process.)
Append: Use the arrow keys to select Append.
223
Advertisement
Table of Contents
