Biostar Z170GT5 User Manual page 26

Secure Boot
Secure Boot can be enabled if 1. System running in user mode with enrolled Platform Key(PK)
2.CSM function is disabled.
Options: Disabled (Default) / Enabled
Secure Boot Mode
Secure Boot mode selector. 'Custom' mode enables users to change Image Execution policy and
manage Secure Boot Keys.
Options: Custom (Default) / Standard
Key Management
Provision Factory Default Keys
Install factory default Secure Boot Keys when system is in setup mode.
Options: Disabled (Default) / Enabled
Enroll all Factory Default Keys
Force System to User Mode - install all Factory Default Keys(PK, KEK, , dbt, dbx). Change takes
effect after reboot.
Save all Factory Default Keys
Save NVRAM content of all Secure Boot Variables to the files (EFI_SIGNATURE_LIST data format)
in root folder on a target file system device.
Platform Key (PK)
Delete Key – Allows you to delete the PK file from your system.
Set new Key – Allows you set new PK file.
Key Exchange Key
Delete Key – Allows you to delete the KEK file from your system.
Set new Key – Allows you set new KEK file.
Append Key – Allows you append Var to KEK.
Authorized Signature
Delete Key – Allows you to delete the DB file from your system.
Set new Key – Allows you set new DB file.
Append Key – Allows you append Var to DB.
26 | 5. Security Menu