Key Management - Supermicro X10DRT-L User Manual

Chapter 4: AMI BIOS
Secure Boot
Select Enabled for Secure Boot flow control. This feature is available when the
platform key (PK) is pre-registered, the platform operates in the user mode, and
CSM is disabled in the setup utility. The options are Disabled and Enabled.
Secure Boot Mode
This item allows the user to change the Image Execution policy and manage Secure
Boot Keys. The options are Standard and Custom.
 Key Management
This item displays Secure Boot Keys configuration information:.
Default Key Provision
Use this item to install the factory default secure boot keys when the system is in
setup mode. The options are Disabled and Enabled.

Enroll All Factory Default Keys
Use this item to install all factory default keys: PK, KEK, db, dbt, and dbx. Selecting
this item will prompt a "Load Default Secure Variables" message box that allows
the user to select Yes or No.
Platform Key
 Delete PK
 Set New PK
Press "Yes" to load "PK" from factory defaults or select "No" to load from a file.
Key Exchange Key
 Delete KEK
 Set New KEK
Press "Yes" to load "KEK" from factory defaults or select "No" to load from a file.
 Append KEK
Press "Yes" to load "KEK" from factory defaults or select "No" to load from a file.
4-35