
BIOS
S
ECURITY
S
CREEN
3-38
Install All Factory
default keys
Force System to User Mode –
install all Factory Default
keys(PK,KEK,db,dbx). Change
takes effect after reboot.
Save All Secure
Boot Variables
Store content of each Secure
Boot Variable(data formatted
as EFI_SIGNATURE_LIST) to a
file with matching name on
selected file system’s root
folder.
Delete All Secure
Boot Variables
Force System to Setup Mode -
clear all Secure Boot Variables
(PK, KEK, db, dbx). Change
takes effect after reboot.
Option only shows up when
keys are installed and “Factory
Default Key Provisioning” is Dis-
abled.
Set new (PK, KEK,
DB, DBX)
1. Launch the file browser to set
Efi Variable from the File.
2. Else load Factory Defaults.
Image must be formatted as Efi
Variable with TimeBased
Authenticated Header.
Delete (PK, KEK,
DB, DBX)
Delete the Variable from
NVRAM. Removing PK will reset
System to Setup Mode.
Append Var to
(KEK, DB, DBX)
Lauches the file browser to add
Key(s) from a file created as
1. Efi Variable with TimeBased
Authenticated Header or
2. Key Certificate wrapped into
EFI_SIGNATURE_LIST or Single
Certificate in X509_DER,
RSA2048_DER or SHA256_BIN
format
Save Secure Boot
Keys
Store content of each Secure
Boot Variable (data formatted
as EFI_SIGNATURE_LIST) to a
file with matching name on
selected file system's root
folder.
Option only shows up when
keys are installed.
Factory Default
Key Provisioning
[
Disabled
]
[Enabled]
Install Factory default Secure
Boot Keys when System is in
Setup Mode.
Install All Factory
default keys
Force System to User Mode –
install all Factory Default
keys(PK,KEK,db,dbx). Change
takes effect after reboot.
Table 37: Key Management Description (Continued)
S
ETUP
I
TEM
O
PTIONS
H
ELP
T
EXT
C
OMMENTS