Table of Contents
Advertisement
Export Secure Boot variables
This feature copies NVRAM content of Secure Boot variables to files in a root folder on
a file system device.
Enroll EFI Image
This allows the image to run in Secure Boot Mode, and enroll SHA256 hash of the binary into an
Authorized Signature Database (db).
Device Guard Ready
Remove 'UEFI CA' from DB
Device Guard ready system must not list 'Microsoft UEFI CA' Certificate in Authorized Signature
database (db). Options include Yes and No.
Restore DB defaults
This feature allows the user to restore DB variables to factory defaults. Options include Yes and No.
Platform Key (PK)
This feature allows the user to configure the settings of the platform keys. Options include Details,
Export, Update, and Delete.
Set New Key
Select Yes to load the new platform keys (PK) from the manufacturer's defaults. Select
No to load the platform keys from a file. The options are Yes and No.
Provision Factory Default Keys
Select Enabled to install the default Secure-Boot keys set by the manufacturer. The op-
tions are Disabled and Enabled.
Key Exchange Keys
Options include Details, Export, Update, Append, and Delete.
Set New Key
Select Yes to load the KEK from the manufacturer's defaults. Select No to load the KEK
from a file. The options are Yes and No.
86
Chapter 4: UEFI BIOS
Advertisement
Table of Contents
