Security; Secure Boot - DFI GH9A3 User Manual

X Security
Aptio Setup Utility - Copyright (C) 2021 American Megatrends, Inc.
Main Advanced Chipset

Security

Boot
Password Description
If ONLY the Administrator's password is set,
then this only limits access to Setup and is
only asked for when entering Setup.
If ONLY the User's password is set, then this
is a power on password and must be entered
to boot or enter Setup. In Setup the User will
have Administrator rights.
The password length must be
in the following range:
Minimum length 3
Maximum length 20
Administrator Password

► Secure Boot

Version 2.20.1274. Copyright (C) 2021 American Megatrends, Inc.
Administrator Password
Set the administrator password. To clear the password, input nothing and press enter when a
new password is asked. Administrator Password will be required when entering the BIOS.
User's Manual | GH9A3
Save & Exit
S e t A d m i n i s t r a t o r P a s s -
word
→←: Select Screen
↑↓: Select Item
Enter: Select
+/- : Change Opt.
F1: General Help
F2: Previous Values
F9: Optimized Defaults
F10: Save & Reset
ESC: Exit
Security
X
Secure Boot
Aptio Setup Utility - Copyright (C) 2021 American Megatrends, Inc.
Security
System Mode Setup
Secure Boot [Disabled]
Not Active
Secure Boot Mode [Custom]
► Restore Factory Keys
► Reset To Setup Mode
► Key Management
Version 2.20.1274. Copyright (C) 2021 American Megatrends, Inc.
Secure Boot
The Secure Boot store a database of certificates in the firmware and only allows the OSes with
authorized signatures to boot on the system. To activate Secure Boot, please make sure that
"Secure Boot" is "[Enabled]", Platform Key (PK) is enrolled, "System Mode" is "User", and CSM
is disabled. After enabling/disabling Secure Boot, please save the configuration and restart the
system. When configured and activated correctly, the Secure Boot status will be "Active".
Secure Boot Mode
Select the secure boot mode — Standard or Custom. When set to Custom, the following fields
will be configurable for the user to manually modify the key database.
Restore Factory Keys
Force system to User Mode. Load OEM-defined factory defaults of keys and databases onto
the Secure Boot. Press Enter and a prompt will show up for you to confirm.
Reset To Setup Mode
Clear the database from the NVRAM, including all the keys and signatures installed in the Key
Management menu. Press Enter and a prompt will show up for you to confirm.
Chapter 3
BIOS SETTING
S e c u r e B o o t a c t i v a t e d
when: Secure Boot is ena-
bled Platform Key(PK) is
enrolled, System mode is
User/Deployed, and CSM is
disabled
→←: Select Screen
↑↓: Select Item
Enter: Select
+/- : Change Opt.
F1: General Help
F2: Previous Values
F9: Optimized Defaults
F10: Save & Reset
ESC: Exit
35