Supermicro SuperServer E100-9S User Manual page 57

 Secure Boot
Secure Boot Enable
Select Enable for secure boot support to ensure system security at bootup. The options
are Enabled and Disabled.
Secure Boot Mode
This feature allows the user to select the desired secure boot mode for the system. The
options are Standard and Custom.
If Secure Boot Mode is set to Custom, Key Management features are available for
configuration:
 Restore Factory Keys
Select Yes to restore all factory keys to the default settings. The options are Yes and No.

Key Management
This submenu allows the user to configure the following Key Management settings.
Factory Key Provision
Select Enabled to install the default Secure Boot keys set by the manufacturer. The options
are Disabled and Enabled.
*If the feature above is enabled, the following items are available for configuration:

Reset to Setup Mode
Select Yes to delete NVRAM content from all of UEFI Secure Boot key databases. The
options are Yes and No.

Restore Factory Keys
Select Yes to restore Secure Boot keys to factory default. The options are Yes and No.

Export Secure Boot variables
Select Yes to copy NVRAM content to a file in the root folder. The options are Yes and No.

Enroll Efi Image
This feature allows the image to run in Secure Boot mode.
Device Guard Ready

Remove 'UEFI CA' from DB
Select Yes to remove UEFI CA from the list of Microsoft Certified DB database. The options
are Yes and No.
57
Chapter 5: BIOS