Table of Contents
Advertisement
Options Summary
Enroll Efi Image
Allow the image to run in Secure Boot mode.
Enroll SHA256 Hash Certificate of a PE Image into Authorized Signature Database
(db).
Device Guard Ready
Remove 'UEFI CA' from
SB
Device Guard ready system must not list 'Microsoft UEFI CA' Certificate in
Authorized Signature database(db).
Restore DB defaults
Restore DB variable to factory defaults.
Secure Boot variable |Size | Keys#| key Source
Platform key(PK) |
1153 | 1 | No Key
Key Exchange keys |
1153 | 1 | No Key
Table Continues on Next Page...
Chapter 3 – AMI BIOS Setup
No
Yes
No
Yes
Details
Enroll Factory Defaults or load certificates from a
file:
1.Public key Certificate:
Export
a)EFI_SIGNATURE_LIST
b)EFI_CERT_X509 (DER)
c)EFI_CERT_RSA2048 (bin)
Update
d)EFI_CERT_SHAXXX
2.Authenticated UEFI Variable
3.EFI PE/COFF Image(SHA256)
Delete
Key Source:
Factory, External, Mixed
Enroll Factory Defaults or load certificates from a
Details
file:
1.Public key Certificate:
Export
a)EFI_SIGNATURE_LIST
b)EFI_CERT_X509 (DER)
Update
c)EFI_CERT_RSA2048 (bin)
d)EFI_CERT_SHAXXX
Append
2.Authenticated UEFI Variable
3.EFI PE/COFF Image(SHA256)
Key Source:
Delete
Factory, External, Mixed
Press 'Yes' to remove 'UEFI CA'
from SB
Press 'Yes' to Restore DB defaults
92
Advertisement
Table of Contents
