Table of Contents
Advertisement
Chapter 6: BIOS
This feature allows you to decide if all secure boot variables should be saved.
Platform Key (PK)
This feature allows you to configure the settings of the platform keys.
Set New Key
Select Yes to load the new platform keys (PK) from the manufacturer's defaults. Select No to load the platform keys from
a file. The options are Yes and No.
Provision Factory Default Keys
Select Enabled to install the default Secure-Boot keys set by the manufacturer. The options are Disabled and Enabled.
Key Exchange Keys
This feature allows you to configure the settings of the Key Exchange Keys. The options include Update and Append.
Authorized Signatures
This feature allows you to configure the settings of the Authorized Signatures. The options include Update and Append.
Forbidden Signatures
This feature allows you to configure the settings of the Forbidden Signatures. The optioons include Update and Append.
Authorized TimeStamps
This feature allows you to configure the settings of the authorized TimeStamps. The options include Update and Append.
OsRecovery Signature
This item uploads and installs an OSRecovery Signature. You may select options for Set New for a factory default key,
or select Append to get it from a file. The file formats accepted are:
1) Public Key Certificate
a. EFI Signature List
b. EFI CERT X509 (DER Encoded)
c. EFI CERT RSA2048 (bin)
d. EFI SERT SHA256 (bin)
2) EFI Time Based Authenticated Variable
When prompted, select "Yes" to load Factory Defaults or "No' to load from a file.
101
Advertisement
Table of Contents
