Table of Contents
Advertisement
Options Summary
Enroll Efi Image
Allow the image to run in Secure Boot mode.
Enroll SHA256 Hash Certificate of a PE Image into Authorized Signature
Database (db).
Device Guard Ready
Remove 'UEFI CA' from
SB
Device Guard ready system must not list 'Microsoft UEFI CA' Certificate in
Authorized Signature database(db).
Restore DB defaults
Restore DB variable to factory defaults.
Secure Boot variable | Size | Keys# | Key Source
Platform key (PK) | 0 | 0
| No Key
Key Exchange keys | 0 |
0 | No Key
Table Continues on Next Page...
Chapter 3 – AMI BIOS Setup
No
Yes
No
Yes
Update
Update
Append
Press 'Yes' to remove 'UEFI CA'
From SB
Press 'Yes' to Restore DB defaults
Enroll Factory Defaults or load
certificates from a file:
1.Public key Certificate:
a) EFI_SIGNATURE_LIST
b) EFI_CERT_X509 (DER)
c) EFI_CERT_RSA2048 (bin)
d) EFI_CERT_SHAXXX
2.Authenticated UEFI Variable
3.EFI PE/COFF Image(SHA256)
Key Source:
Factory, External, Mixed
Enroll Factory Defaults or load
certificates from a file:
1.Public key Certificate:
a)EFI_SIGNATURE_LIST
b)EFI_CERT_X509 (DER)
c)EFI_CERT_RSA2048 (bin)
d)EFI_CERT_SHAXXX
2.Authenticated UEFI Variable
3.EFI PE/COFF Image(SHA256)
Key Source:
Factory, External, Mixed
71
Advertisement
Table of Contents
