3-21
Chapter 3: BIOS setup
Boot from Network Devices
This item allows you to select the type of network devices that you want to launch.
Configuration options: [Ignore] [Legacy only] [UEFI driver first]
Boot from Storage Devices
This item allows you to select the type of storage devices that you want to launch.
Configuration options: [Ignore] [Legacy only] [UEFI driver first]
Secure Boot
This item allows you to configure the Windows
®
Secure Boot settings and manage its keys to
protect the system from unauthorized access and malwares during POST.
OS Type
[Windows UEFI
mode]
This item allows you to select your installed operating
system. Execute the Microsoft
®
Secure Boot check. Only
select this option when booting on Windows
®
UEFI mode
or other Microsoft
®
Secure Boot compliant OS.
[Other OS]
Get the optimized function when booting on Windows
®
non-UEFI mode. Microsoft
®
Secure Boot only supports
Windows
®
UEFI mode.
Key Management
Install Default Secure Boot Keys
Load the default secure boot keys, including the PK (platform key), KEK
(key-exchange key), db (signature database), and dbx (revoked signature
database). All the secure boot keys states will change from unloaded to
loaded. Save changes and reset the system for the change to take effect.
Save all Secure Boot variables
This item allows you to save all the Secure Boot keys to a USB storage
device.
PK Management
The Platform Key (PK) locks and secures the firmware from any permissible
changes. The system verifies the PK before your system enters the OS.
Save To File
This item allows you to save the PK to a USB storage device.
Set New Key
This item allows you to load the downloaded PK from a USB
storage device.
Delete key
This item allows you to delete the PK from your system. Once the
PK is deleted, all the system’s Secure Boot keys will not be active.
Configuration options: [Yes] [No]
The PK file must be formatted as a UEFI variable structure with time-based
authenticated variable.
