Security Boot; Key Management - Asus E2KM1I-DELUXE User Manual

The following four items appear when you set Launch CSM to [Enabled].
Boot Devices Control [UEFI and Legacy OpROM]
Allows you to select the type of devices that you want to boot up. Configuration options:
[UEFI and Legacy OpROM] [Legacy OpROM only] [UEFI only]
Boot from Network Devices [Legacy OpROM first]
Allows you to select the type of network devices that you want to launch. Configuration
options: [Legacy OpROM first] [UEFI driver first] [Ignore]
Boot from Storage Devices [Legacy OpROM first]
Allows you to select the type of storage devices that you want to launch. Configuration
options: [Both, Legacy OpROM first] [Both, UEFI first] [Legacy OpROM first] [UEFI driver first]
[Ignore]
Boot from PCIe/PCI Expansion Devices [Legacy OpROM first]
Allows you to select the type of PCIe/PCI expansion devices that you want to launch.
Configuration options: [Legacy OpROM first] [UEFI driver first]
2.7.8

Security Boot

Allows you to configure the Windows
the system from unauthorized access and malwares during POST.
OS Type [Windows UEFI mode]
Allows you to select your installed operating system.
[Windows UEFI mode]
[Other OS]
The following items appear when OS Type is set to [Windows UEFI mode].

Key Management

It allows you to manage the Secure Boot keys.
Manage the Secure Boot Keys (PK, KEK, db, dbx)
Install Default Secure Boot keys
Allows you to immediately load the default Security Boot keys, Platform key (PK), Key-
exchange Key (KEK), Signature database (db), and Revoked Signatures (dbx). The
Platform Key (PK) state will change from Unloaded mode to Loaded mode. The settings are
applied after reboot or at the next reboot.
Key-exchange Key (KEK) refers to Microsoft
2-26
Secure Boot settings and manage its keys to protect
®
Executes the Microsoft
select this option when booting on Windows
mode or other Microsoft
Get the optimized function when booting on
Windows non-UEFI mode, Windows
®
or other Microsoft
®
OS. Only on Windows
Secure Boot can function properly.
Secure Boot Key database (KEK).
®
Secure Boot check. Only
®
Secure Boot compliant OS.
®
Vista/XP,
®
Secure Boot non-compliant
UEFI mode that Microsoft
®
Chapter 2: Getting started
UEFI
®
®