Secure Boot Mode
Specifies whether the Key Management submenu is available.
Standard
The Key Management submenu is not available.
Custom
The Key Management submenu is available.
5.1.1
Key Management
Submenu for deleting, changing and adding the key and signature databases
required for Secure Boot.
I
Without the installed Platform Key (PK), the system is in setup mode
(Secure Boot is disabled). As soon as the PK is installed, the system
switches to user mode (Secure Boot can be enabled).
Factory Default Key Provision
If the system is in setup mode (no Platform Key is installed), it is possible
to install the default Secure Boot keys and signature databases.
Disabled
The available Secure Boot keys and signature databases remain
unchanged.
Enabled
If the PK, KEK, DB, DBT, DBX signature databases are not
available, the default Secure Boot keys and signature databases
will be installed after rebooting the system.
Enroll All Factory Default Keys
I
This menu item is only visible when Factory Default Key Provision
is set to Enabled.
Puts the system in setup mode (Secure Boot is disabled). All keys and
signature databases (PK, KEK, DB, DBT, DBX) in the system are
deleted.
Save All Secure Boot Keys
Saves all keys and signature databases to the selected drive.
BX2560 M2
D3320 - BIOS Setup Utility
Security menu
49