specification. When set to
Controlled
, selected UEFI variables are protected in the
environment and new UEFI boot entries are forced to be at the end of the current
boot order.
Secure Boot
Enables Secure Boot, where the BIOS authenticates each pre-boot image by using
the certificates in the Secure Boot Policy. Secure Boot is disabled by default.
Secure Boot
Policy
When Secure Boot policy is set to
Standard
, the BIOS uses the system
manufacturer’s key and certificates to authenticate pre-boot images. When Secure
Boot policy is set to
Custom
, the BIOS uses the user-defined key and certificates.
Secure Boot policy is set to
Standard
by default.
Secure Boot
Policy Summary
Specifies the list of certificates and hashes that secure boot uses to authenticate
images.
Secure Boot Custom Policy Settings screen details
Secure Boot Custom Policy Settings is displayed only when the
Secure Boot Policy
option is set to
Custom
.
To view the
Secure Boot Custom Policy Settings
screen, click
System Setup Main Menu
→
System BIOS
→
System Security
→
Secure Boot Custom Policy Settings
.
The
Secure Boot Custom Policy Settings
screen details are explained as follows:
Platform Key
Imports, exports, deletes, or restores the platform key (PK).
Key Exchange Key
Database
Enables you to import, export, delete, or restore entries in the Key Exchange Key
(KEK) Database.
Authorized
Signature
Database
Imports, exports, deletes, or restores entries in the Authorized Signature Database
(db).
Forbidden
Signature
Database
Imports, exports, deletes, or restores entries in the Forbidden Signature Database
(dbx).
Miscellaneous Settings details
The
Miscellaneous Settings
screen details are explained as follows:
System Time
Enables you to set the time on the system.
System Date
Enables you to set the date on the system.
Asset Tag
Specifies the asset tag and enables you to modify it for security and tracking
purposes.
Keyboard
NumLock
Enables you to set whether the system boots with the NumLock enabled or
disabled. This option is set to
On
by default.
NOTE: This option does not apply to 84-key keyboards.
F1/F2 Prompt on
Error
Enables or disables the F1/F2 prompt on error. This option is set to
Enabled
by
default. The F1/F2 prompt also includes keyboard errors.
Load Legacy
Video Option
ROM
Enables you to determine whether the system BIOS loads the legacy video (INT
10H) option ROM from the video controller. Selecting
Enabled
in the operating
system does not support UEFI video output standards. This field is available only for
UEFI boot mode. You cannot set the option to
Enabled
if
UEFI Secure Boot
mode
is enabled.
35
