Biostar B250GTN User Manual page 26

Attempt Secure Boot
Secure Boot activated when Platform Key(PK) is enrolled, System mode is User/Deployed, and
CSM function is disabled.
Options: Disabled (Default) / Enabled
Secure Boot Mode
Secure Boot mode selector : Standard/Custom. In Custom mode Secure Boot Variables can be
configured without authentication.
Options: Custom (Default) / Standard
Key Management
Provision Factory Defaults
Allow to provision factory default Secure Boot Keys when system is in setup mode.
Options: Disabled (Default) / Enabled
Install Factory Default keys
Force System to User Mode - install all Factory Default Keys. Change takes effect after reboot.
Enroll Efi Image
Allow the image to run in Secure Boot mode. Enroll SHA256 hash of the binary into Authorized
Signature Database (db).
Save all Secure Boot variables
Save NVRAM content of all Secure Boot policy variables to the files (EFI_SIGNATURE_LIST data
format) in root folder on a target file system device.
Platform Key (PK)
Save Key to File – Allows you save key to PK file.
Set new Key – Allows you set new PK file.
Erase Key – Allows you erase PK file.
Key Exchange Keys
Save Key to File – Allows you save key to KEK file.
Set new Key – Allows you set new KEK file.
Append Key – Allows you append Var to KEK.
Erase Key – Allows you erase KEK file.
26 | 5. Security Menu