Secure Boot - Advantech MIX-Q670A1 Manual

4. Confirm the password when prompted.
To clear the user password, follow the same steps as in changing a user
password, but press <Enter> when prompted to create/confirm the password. After
you clear the password, the User Password item on top of the screen shows Not
Installed.
3.5.3

Secure Boot

Secure Boot feature is active when Secure Boot is set to [Enabled], Platform Key
(PK) is enrolled and the system is running in User mode. Changing the mode
requires platform reset. Configuration options: [Disabled] [Enabled]
Secure Boot Mode
Allows you to select Secure Boot Mode. When set to [Custom], Secure Boot Policy
variables can be configured by a physically present user without full authentication.
Configuration options: [Standard] [Custom]
Restore Factory Keys
Allows you to install factory default secure boot key databases.
Restore to Setup mode
Allows you to delete all secure boot key databases from NVRAM.
Key Management
Allows you to modify Secure Boot Policy variables without full authentication.
Factory Key Provision
Allows you to install factory default Secure Boot keys when the system is in Setup
mode.
Configuration options: [Enabled] [Disabled]
Platform Key (PK)
Configuration options: [Details] [Export] [Update] [Delete]
Key Exchange Keys / Authorized Signatures / Forbidden Signatures
Configuration options: [Details] [Export] [Update] [Append] [Delete]
Authorized TimeStamps / OsRecovery Signatures
Configuration options: [Update] [Append]
Export Secure Boot variables
Allows you to save NVRAM content of Secure boot variable to a file.
Enroll EFi Image
Allows you to enroll SHA256 Hash certificate of a PE image into Authorized
Signature database (db).
Chapter 3: BIOS setup
3-13