Gigabyte MX34-BS0 User Manual page 70

Parameter
Key Management
Description
Press [Enter] to configure advanced items.
Please note that this item is configurable when Secure Boot Mode is set
to Custom.
Factory Key Provision
Š
– Allows to provision factory default Secure Boot keys when system is in
Setup Mode.
– Options available: Enabled, Disabled. Default setting is Disabled.
Restore Factory Keys
Š
– Installs all factory default keys. It will force the system in User Mode.
– Options available: Yes, No.
Reset To Setup Mode
Š
– Reset the system to Setup Mode.
– Options available: Yes, No.
Export Secure Boot variables
Š
– Copy NVRAM content of Secure Boot variables to files in a root folder
on a file system device.
Enroll Efi Image
Š
– Press [Enter] to enroll SHA256 hash of the binary into Authorized
Signature Database (db).
Device Guard Ready
Š
Remove 'UEFI CA' from DB
Š
– Press [Enter] to remove Microsoft UEFI CA from Secure Boot DB.
Restore DB defaults
Š
– Restore DB variable to factory defaults.
Secure Boot variable
Š
– Displays the current status of the variables used for secure boot.
Platform Key (PK)
Š
– Displays the current status of the Platform Key (PK).
– Press [Enter] to configure a new PK.
– Options available: Update.
Key Exchange Keys (KEK)
Š
– Displays the current status of the Key Exchange Key Database (KEK).
– Press [Enter] to configure a new KEK or load additional KEK from
storage devices.
– Options available: Update, Append.
Authorized Signatures (DB)
Š
– Displays the current status of the Authorized Signature Database.
– Press [Enter] to configure a new DB or load additional DB from storage
devices.
– Options available: Update, Append.
Forbidden Signatures (DBX)
Š
– Displays the current status of the Forbidden Signature Database.
– Press [Enter] to configure a new dbx or load additional dbx from
storage devices.
– Options available: Update, Append.
BIOS Setup
- 68 -