Asus H-97-PRO Manual page 101

Load Default PK
Select Yes to load the system default PK or select No to load a
downloaded PK from a USB storage device.
The PK file must be formatted as a UEFI variable structure with time-based authenticated
variable.
KEK Management
The KEK (Key-exchange Key or Key Enrollment Key) manages the Signature database
(db) and Revoked Signature database (dbx).
Key-exchange Key (KEK) refers to Microsoft
Delete KEK
This item allows you to delete the KEK from your system.
Configuration options: [Yes] [No]
Load Default KEK
Select Yes to load the system default KEK or select No to load a
downloaded KEK from a USB storage device.
Append Default KEK
Select Yes to append the system default KEK or select No to append a
downloaded KEK from a USB storage device.
The KEK file must be formatted as a UEFI variable structure with time-based authenticated
variable.
DB Management
The db (Authorized Signature database) lists the signers or images of UEFI
applications, operating system loaders, and UEFI drivers that you can load on the
single computer.
Delete the db
This item allows you to delete the db file from your system.
Configuration options: [Yes] [No]
Load Default db
Select Yes to load the system default db or select No to load a
downloaded db from a USB storage device..
Append Default db
Select Yes to append the system default db or select No to append a
downloaded db from a USB storage device.
The db file must be formatted as a UEFI variable structure with time-based authenticated
variable.
ASUS H97-PRO
® Secure Boot Key-Enrollment Key (KEK).
3-47