Gigabyte S461-3T0 User Manual page 103

Parameter
Key Management (cont.)
Description
Please note that this item is configurable when Secure Boot Mode is set to Custom.
Factory Key Provision
Š
– Installs factory default Secure Boot keys after the platform resets and
the system is in Setup Mode.
– Options available: Enabled/Disabled. Default setting is Disabled.
Restore Factory Keys
Š
– Installs factory default Secure Boot key databases. It will force the
system in User Mode.
– Options available: Yes/No.
Enroll Efi Image
Š
– Press [Enter] to enroll SHA256 hash of the binary into Authorized
Signature Database (db).
Restore DB defaults
Š
– Press [Enter] to restore DB variable to factory defaults.
– Options available: Yes/No.
Secure Boot variable
Š
– Displays the current status of the variables used for secure boot.
Platform Key (PK)
Š
– Displays the current status of the Platform Key (PK).
– Press [Enter] to configure a new PK.
– Options available: Set New.
Key Exchange Keys (KEK)
Š
– Displays the current status of the Key Exchange Key Database (KEK).
– Press [Enter] to configure a new KEK or load additional KEK from
storage devices.
– Options available: Set New/Append.
Authorized Signatures (DB)
Š
– Displays the current status of the Authorized Signature Database.
– Press [Enter] to configure a new DB or load additional DB from storage
devices.
– Options available: Set New/Append.
Forbidden Signatures (DBX)
Š
– Displays the current status of the Forbidden Signature Database.
– Press [Enter] to configure a new dbx or load additional dbx from
storage devices.
– Options available: Set New/Append.
Authorized TimeStamps (DBT)
Š
– Displays the current status of the Authorized TimeStamps Database.
– Press [Enter] to configure a new DBT or load additional DBT from
storage devices.
– Options available: Set New/Append.
OsRecovery Signatures
Š
– Displays the current status of the OsRecovery Signature Database.
– Press [Enter] to configure a new OsRecovery Signature or load
additional OsRecovery Signature from storage devices.
– Options available: Set New/Append.
- 103 - BIOS Setup