Table of Contents
Advertisement
Secure Boot Mode
If Custom mode is enabled, Secure Boot variables can be configured without authentication.
The options are Custom and Standard.
CSM Support
Select Enabled to support the EFI Compatibility Support Module (CSM), which provides
compatibility support for traditional legacy BIOS for system boot. The options are Enabled
and Disabled.
Key Management
This submenu allows the user to configure the following Key Management settings.
Provision Factory Defaults
Select Enabled to install the default Secure-Boot keys set by the manufacturer. The options
are Disabled and Enabled.
Install Factory Default Keys
Select Yes to install all default secure keys set by the manufacturer. The options are Yes
and No.
Enroll EFI Image
Select this item and press <Enter> to select an EFI (Extensible Firmware Interface) image
for the system to operate in Secure Boot mode.
Save All Secure Boot Variables
This feature allows the user to decide if all secure boot variables should be saved.
Platform Key (PK)
This feature allows the user to configure the settings of the platform keys.
Set New Key
Select Yes to load the new platform keys (PK) from the manufacturer's defaults. Select No
to load the platform keys from a file. The options are Yes and No.
Key Exchange Key
Set New Key
Select Yes to load the KEK (Key Exchange Key) from the manufacturer's defaults. Select No
to load the KEK from a file. The options are Yes and No.
Append Key
Select Yes to add the KEK from the manufacturer's defaults list to the existing KEK. Select
No to load the KEK from a file. The options are Yes and No.
113
Chapter 4: BIOS
Advertisement
Table of Contents
