JETWAY MI12-00V Series User Manual page 53

Secure Boot Control
Secure Boot can be enabled if 1. System running in user mode with enrolled Platform Key
(PK); 2. CSM function is disabled.
The optional settings are: [Disabled]; [Enabled].
Secure Boot Mode
Set UEFI Secure Boot Mode to Standard mode or Custom mode. This change is effective
after save. After reset, this mode will return to Standard mode.
The optional settings are: [Standard]; [Custom].
*When set as [Custom], user can make further settings in 'Key Management'.
 Key Management
This item enables experienced users to modify Secure Boot variables, witch includes the
following items:
Provision Factory Default Keys
This item is for user to install factory default secure boot keys when system is in Setup
Mode.
The optional settings are: [Disabled]; [Enabled].

Enroll All Factory Default Keys
This item forces system to User Mode-install all Factory Default keys.
*This item shows up when 'Provision Factory Default Keys' is set as [Enabled].

Save all Secure Boot Variables
This item will save NRRAM content of all Secure Boot variables to the files
(WFI_SIGNATURE_LIST data format) in root folder on a target file system device.

Platform Key (PK)/Key Exchange Keys/Authorized Signature/Forbidden
Signature/ Authorized TimeStamps/OS Recovery Signatures
Use this item to enroll Factory Defaults or load the keys from a file with:
1. Public Key Certificate in:
a) EFI_SIGNATURE_LIST
b) EFI_ CERT_X509 (DER encoded)
c) EFI_ CERT_RSA2048 (bin)
d) EFI_ CERT_SHA256 (bin)
2. Authenticated UEFI Variable
47