Table of Contents
Advertisement
Chapter 4: AMI BIOS
Secure Boot
Select Enable for secure boot support to ensure system security at bootup. The
options are Disabled and Enabled.
Secure Boot Mode
This feature allows the user to select the desired secure boot mode for the system.
The options are Standard and Custom.
CSM Support
Select Enabled to enable CSM support to enhance system security. The options
are Disabled and Enabled.
Key Management
Default Key Provision
Select Enable to install all manufacture defaults for the following system security
settings. The options are Disabled and Enabled.
Enroll All Factory Default Keys
This feature allows the user to store security-related boot data in a file of the same
named in the system root folder of your computer.
Save All Secure Boot Variables
This feature allows the user to save the secure boot settings specified by the user.
Platform Key
Delete PK
Select <Yes> to confirm deletion of the Platform Key (PK) from the NVRAM (Non-
Volatile RAM).
Set New PK (Key)
Select <Yes> to load the manufacture_default platform keys for your system. Select
No to load the default settings from other sources.
Key Exchange Key (KEK)
Delete KEK (Key Exchange Key)
Select <Yes> to confirm deletion of the KEK from the NVRAM (Non-Volatile RAM).
Set New KEK (Key Exchange Key)
Select <Yes> to confirm that a new KEK will be set in the NVRAM (Non-Volatile
RAM).
Append KEK (Key Exchange Key)
Select <Yes> to load the new KEK from the manufacture defaults. Select <No> to
load the new KEK from other sources.
4-37
Advertisement
Table of Contents
