Supermicro X11DDW-L/NT User Manual page 133

Secure Boot
Select Enabled to use Secure Boot settings. The options are Enabled and Disabled.
Secure Boot Mode
Use this feature to select the desired secure boot mode for the system. The options are
Standard and Custom.
CMS Support
If this feature is set to Enabled, legacy devices will be supported by the system. The options
are Enabled and Disabled.
Key Management

Vendor Keys
Provision Factory Defaults
Select Yes to install manufacturer default keys for system security use. The options are
Enabled and Disabled.
Restore Factory Keys

Select Yes to restore all manufacturer default keys for system security use. The options are
Yes and No.
Reset to Setup Mode

This feature resets the system to Setup Mode.
Export Secure Boot Variables

This feature is used to copy the NVRAM content of Secure Boot variables to a storage device.
Enroll Efi Image

Select this feature and press <Enter> to specify an EFI (Extensible Firmware Interface) image
for the system to use when it operates in the Secure Boot mode.
Device Guard Ready
Remove 'UEFI CA' from DB

Select Yes to remove UEFI CA from the database. The options are Yes and No.
135
Chapter 4: UEFI BIOS