Table of Contents
Advertisement
3.6.1.1
Key Management
Options Summary
Factory Key Provision
Secure Boot feature is Active if Secure Boot is Enabled, Platform Key(PK) is enrolled and
the System is in User mode. The mode change requires platform reset
Restore Factory Keys
Force System to User Mode. Install factory default Secure Boot key databases
Reset To Setup Mode
Delete all Secure Boot key databases from NVRAM
Export Secure Boot variables
Copy NVRAM content of Secure Boot variables to files in a root folder on a file system
device
Enroll Efi Image
Allow the image to run in Secure Boot mode. Enroll SHA256 Hash certificate of a PE
image into Authorized Signature Database (db)
Remove 'UEFI CA' from DB
Device Guard ready system must not list 'Microsoft UEFI CA' Certificate in Authorized
Signature database (db)
Chapter 3 – AMI BIOS Setup
Disabled
Enabled
Optimal Default, Failsafe Default
67
Advertisement
Table of Contents
