Table of Contents
Advertisement
Table 9. Security screen options (continued)
Option
Master password lockout
Secure Boot screen options
Table 10. Secure Boot options
Option
Secure Boot Enable
Expert Key Management
Intel Software Guard Extensions screen options
Table 11. Intel Software Guard Extensions options
Option
Intel SGX Enable
Enclave Memory Size
80
BIOS overview
Description
This option is not enabled by default
Description
This option enables or disables the Secure Boot feature.
● Disabled (Default)
● Enabled
Enables you to manipulate the security key databases only if
the system is in Custom Mode. The Enable Custom Mode
option is disabled by default. The options are:
● PK—enabled by default
● KEK
● db
● dbx
If you enable the Custom Mode, the relevant options for PK,
KEK, db, and dbx appear. The options are:
● Save to File—Saves the key to a user-selected file
● Replace from File—Replaces the current key with a key
from a user-selected file
● Append from File—Adds a key to the current database
from a user-selected file
● Delete—Deletes the selected key
● Reset All Keys—Resets to default setting
● Delete All Keys—Deletes all the keys
NOTE:
If you disable the Custom Mode, all the changes
made are erased and the keys are restored to default
settings.
Description
Enable Intel Software Guard Extensions to provide a secured
environment for running code/storing sensitive information in
the context of the main OS.
● Disabled— default
● Enabled
● Software Controlled
Sets Intel Software Guard Extensions (SGX) Enclave Reserve
Memory Size. When SGX is set to Software Controlled, this
setting is not available and has no effect.
● 32 MB
● 64 MB
● 128 MB (default)
Advertisement
Table of Contents
