Asus X99-E-10G WS User Manual page 132

OS Type [Windows UEFI mode]
[Windows UEFI Mode] Execute the Microsoft secure boot check. Only check this
[Other OS]
The following item appears only when you set the OS Type to [Other OS].
Enhanced Mode [Disabled]
Configuration options: [Disabled] [Enabled]
The Microsoft secure boot can only function properly on Windows UEFI mode.
Key Management
3-62
option when booting on Windows UEFI mode or other
Microsoft secure boot compliant operating systems.
Select this option to get the optimized functions when booting
on Windows non-UEFI mode and Microsoft secure boot
noncompliant operating systems.
Install Default Secure Boot keys
This item allows you to load the default Security Boot keys, Platform key
(PK), Key-exchange Key (KEK), Signature database (db), and Revoked
Signatures (dbx). When the default Secure boot keys are loaded, the PK
state will change from Unloaded mode to loaded mode. Save changes and
reset the system for the change to take effect.
Clear Secure Boot keys
This item allows you to delete all the previously applied secure boot keys,
including the PK (Platform Key), KEK (Key-Exchange Key), DB (signature
database), and DBX (revoked signature database). All the secure boot
keys states will change from loaded to unloaded. Save changes and reset
the system for the change to take effect.
Save Secure Boot Keys
This item allows you to save all the secure boot keys to a USB storage
device.
PK Management
Delete PK
This item allows you to delete the PK (Platform Key). Once the PK is
deleted, the secure boot function will be disabled.
Load Default PK
[Yes] Load the default PK.
[No] Load the PK from a USB storage device.
Delete KEK
This item allows you to delete the KEK (Key-Exchange Key). Once the KEK
is deleted, the DB (signature database) and the DBX (revoked signature
database) will not be updateable in the operating system.
Load Default KEK
[Yes] Load the default KEK.
[No] Load the KEK from a USB storage device.
Append Default KEK
[Yes] Append the default KEK.
[No] Append the additional KEK from a USB storage device.
Chapter 3: BIOS Setup