Biostar H310MDG2 User Manual page 28

Secure Boot
Secure Boot feature is active if Secure Boot is enabled, Platform Key(PK) is enrolled and the
system is in user mode. The mode change requires platform reset.
Options: Disabled (Default) / Enabled
Secure Boot Customization
Secure Boot mode options : Standard or Custom. In Custom mode, Secure Boot Policy variables
can be configured by a physically present user without full authentication.
Options: Custom (Default) / Standard
Restore Factory Keys
Force System to User Mode. Configure NVRAM to contain OEM-defined factory default Secure
Boot keys.
Restore To Setup Mode
Delete NVRAM content of all UEFI Secure Boot Key databases.
Key Management
Factory Key Provision
This item install factory default Secure Boot Keys after the platform reset and while the system is
in setup mode.
Options: Disabled (Default) / Enabled
Restore Factory Keys
Force System to User Mode - install all Factory Default Keys(PK, KEK, , dbt, dbx). Change takes
effect after reboot.
Reset To Setup Mode
This item delete all Secure Boot key databases from NVRAM.
Export Secure Boot Variables
Copy NVRAM content of Secure Boot variables to files in a root folder on a file system device.
Enroll EFI Image
This item allows the image to run in Secure Boot mode. Enroll SHA256 hash certificate of a PE
image into Authorized Signature Database(db).
28 | 5. Security Menu