Lanner FW-8894, User Manual

Page: 77 / 89

Chapter 5 BIOS Setup
77
Key Management
Allows you to provision advanced Secure Boot settings.
Provision Factory Defaults
Secure Boout Variables
Item Description
Provision Factory
Defaults
Enable
Disabled
Allow to provision factory default Secure Boot Keys
when System is in Setup Mode
Item Description
Install Factory Default keys
Forces System to User Mode - install all Factory Default keys when the
system is in Setup Mode.
Enroll Efi Image
Allows the image to run in Secure Boot mode. Enroll SHA256 hash of the
binary into Authorized Signature Database (db)
Save All Secure Boot
Variables
This feature allows the user to save the secure boot settings specified by
the user
Item Description
Platform Key (PK)
This feature is to enroll Factory Defaults or load the keys from a file
with:
1 . Public Key Certificate in:
a) EFI_SIGNATURE_LIST
b) EFI_ CERT_X509 (DER encoded)
c) EFI_ CERT_RSA2048 (bin)
d) EFI_ CERT_SHA256 (bin)
2. Authenticated UEFI Variable
Key Exchange Keys
Authorized Signature
Forbidden Signature
Authorized TimeStamps
OS Recovery Signatures