Table of Contents
Advertisement
Secure Boot
Secure Boot activated when Platform Key(PK) is enrolled, System mode is in
User/Deployed, and CCSM function is disabled.
The optional settings: [Disabled]; [Enabled].
Secure Boot Mode
Secure Boot mode selector: Standard/Custom.
In Custom mode, Secure Boot Policy Variables can be configured without
authentication.
The optional settings: [Standard]; [Custom].
Key Management
This item enables expert users to modify Secure Boot Policy variables without full
authentication, which includes the following items:
Provision Factory Defaults
This item allows to provision factory default Secure Boot keys when System is in
Setup Mode.
The optional settings: [Disabled]; [Enabled].
Install Factory Default keys
Use this item to force System to User Mode – install all Factory Default keys.
Enroll Efi Image
This item allows the image to run in Secure Boot mode.
Enroll SHA256 hash of the binary into Authorized Signature Database (db).
Save all Secure Boot Variables
Secure Boot variable/Size/Keys#/Key Source
Platform Key(PK)/Key Exchange Keys/Authorized Signatures/Forbidden
Signatures/ Authorized TimeStamps/OsRecovery Signatures
Use this item to enroll Factory Defaults or load certificates from a file:
1. Public Key Certificate:
a) EFI_SIGNATURE_LIST
53
Advertisement
Table of Contents
