Table of Contents
Advertisement
Device Guard Ready
Remove 'UEFI CA' from DB
Use this feature to remove the Microsoft UEFI CA certificate from the database. The options
are Yes and No.
Restore DB Defaults
Select Yes to restore all DBs to the default settings. The options are Yes and No.
Secure Boot variable | Size | Keys# | Key Source
Platform Key (PK)
Update
Select Yes to load a factory default PK or No to load from a file on an external media.
Key Exchange Keys (KEK)
Update
Select Yes to load a factory default KEK or No to load from a file on an external media.
Append
Select Yes to add the KEK from the manufacturer's defaults list to the existing KEK. Select
No to load the KEK from a file. The options are Yes and No.
Authorized Signatures
Update
Select Yes to load a factory default db or No to load from a file on an external media.
Append
Select Yes to add the db from the manufacturer's defaults list to the existing db. Select No
to load the db from a file. The options are Yes and No.
Forbidden Signatures
Update
Select Yes to load a factory default dbx or No to load from a file on an external media.
Append
Select Yes to add the dbx from the manufacturer's defaults list to the existing dbx. Select
No to load the dbx from a file. The options are Yes and No.
75
Chapter 5: UEFI BIOS
Advertisement
Table of Contents
