Table of Contents
Advertisement
3.8.1.1
Key Management
Options Summary
Factory Key Provision
Install factory default Secure Boot keys after the platform reset and while the System is
in Setup mode.
Restore Factory Keys
Reset to Setup Mode
Export Secure Boot
variables
Enroll Efi Image
Remove 'UEFI CA' from
DB
Restore DB defaults
Chapter 3 – AMI BIOS Setup
Disabled
Enabled
Force System to User Mode. Install factory default Secure Boot
key databases.
Delete all Secure Boot key databases from NVRAM.
Copy NVRAM content of Secure Boot variables to files in a root
folder on a file system device.
Allow the image to run in Secure Boot mode. Enroll SHA256
Hash certificate of a PE image into Authorized Signature
Database (db).
Device Guard ready system must not list 'Microsoft UEFI CA'
Certificate in Authorized Signature database (db).
Restore DB variable to factory defaults.
Optimal Default, Failsafe Default
69
Advertisement
Table of Contents
