Asus RS500-E9 Series, User Manual, Page: 123 / 166

5-45 ASUS RS500-E9 Series
Factory Key Provision [Disabled]
Allows you to provision factory default Secure Boot keys when the system is in Setup
Mode on next re-boot.
Configuration options: [Disabled] [Enabled]
Restore Factory keys
This item will the force system to User mode. This allows you to configure NVRAM to
contain OEM-defined factory default Secure Boot keys.
Reset to Setup Mode
This item allows you to delete the NVRAM content of all the UEFI Secure Boot key
databases.
Export Secure Boot variables
This item will copy the NVRAM content of the Secure Boot variables to a file system
device.
Enroll Efi Image
This item will allow the image to run in Secure Boot mode.
Device Guard Ready
Remove ‘UEFI CA’ from DB
Remove Microsoft UEFI CA from Secure Boot DB.
Restore DB defaults
Restore DB variable to factory defaults.
Platform Key (PK) / Key Exchange Keys (KEK) / Authorized Signatures (DB)
/ Forbidden Signatures (DBX) / Authorized TimeStamps (DBT) / OsRecovery
Signatures
Configuration options: [Erase] [Set New] [Save to File]