Remove 'UEFI CA' from DB
Restore DB defaults
Select Yes to restore the DB defaults.
Secure Boot Variable
Platform Key (PK)
Update
Select Yes to load a factory default PK or No to load from a file on an external media.
Key Exchange Keys
Update
Select Yes to load a factory default KEK or No to load from a file on an external media.
Append
Select Yes to add the KEK from the manufacturer's defaults list to the existing KEK.
Select No to load the KEK from a file. The options are Yes and No.
Authorized Signatures
Update
Select Yes to load a factory default DB or No to load from a file on an external media.
Append
Select Yes to add the DB from the manufacturer's defaults list to the existing DB. Select
No to load the DB from a file. The options are Yes and No.
Forbidden Signatures
Update
Select Yes to load a factory default DBX or No to load from a file on an external media.
Append
Select Yes to add the DBX from the manufacturer's defaults list to the existing DBX.
Select No to load the DBX from a file. The options are Yes and No.
101
Chapter 4: UEFI BIOS