Table of Contents
Advertisement
Secure Boot
Use this item to enable secure boot. The options are Disabled and Enabled.
Secure Boot Mode
Use this item to configure Secure Boot variables without authentication. The options are
Standard and Custom.
CSM Support
Select Enabled to support the EFI Compatibility Support Module (CSM), which provides
compatibility support for traditional legacy BIOS for system boot. The options are Enabled
and Disabled.
Key Management
This submenu allows the user to configure the following Key Management settings.
Provision Factory Default Keys
Select Enabled to install the default Secure-Boot keys set by the manufacturer. The op-
tions are Disabled and Enabled.
Enroll All Factory Default Keys
Select Yes to install all default secure keys set by the manufacturer. The options are
Yes and No.
Enroll EFI Image
This feature allows the image to run in Secure Boot Mode. Enroll SHA256 Hash Certifi-
cate of the image into the Authorized Signature Database.
Save All Secure Boot Variables
This feature allows the user to decide if all secure boot variables should be saved.
Platform Key (PK)
This feature allows the user to configure the settings of the platform keys.
Set New
Select Yes to load the new platform keys (PK) from the manufacturer's defaults. Select
No to load the platform keys from a file. The options are Yes and No.
99
Chapter 6: BIOS
Advertisement
Table of Contents
