Advertisement
Chapter 5 BIOS Setup
Key Management
Allows you to provision advanced Secure Boot settings.
Provision Factory Defaults
Item
Provision Factory
Defaults
Item
Install Factory Default keys
Enroll Efi Image
Save All Secure Boot
Variables
Secure Boout Variables
Item
Platform Key (PK)
Key Exchange Keys
Authorized Signature
Forbidden Signature
Authorized TimeStamps
OS Recovery Signatures
Description
Enable
Allow to provision factory default Secure Boot Keys
Disabled
when System is in Setup Mode
Forces System to User Mode - install all Factory Default keys when the
system is in Setup Mode.
Allows the image to run in Secure Boot mode. Enroll SHA256 hash of the
binary into Authorized Signature Database (db)
This feature allows the user to save the secure boot settings specified by
the user
This feature is to enroll Factory Defaults or load the keys from a file
with:
1. Public Key Certificate in:
a) EFI_SIGNATURE_LIST
b) EFI_ CERT_X509 (DER encoded)
c) EFI_ CERT_RSA2048 (bin)
d) EFI_ CERT_SHA256 (bin)
2. Authenticated UEFI Variable
77
Description
Description
Advertisement
