S
ECURITY
S
CREEN
BIOS
3-39
Exit Screen
The Exit screen allows the user to choose to save or discard the configuration changes
made on the other screens. It also provides a method to restore the server to the factory
defaults or to save or restore a set of user defined default values. If Restore Defaults is
selected, the default settings, noted in bold in the tables in this chapter, will be applied. If
Save All Secure
Boot Variables
Store content of each Secure
Boot Variable(data formatted
as EFI_SIGNATURE_LIST) to a
file with matching name on
selected file system’s root
folder.
Delete All Secure
Boot Variables
Force System to Setup Mode -
clear all Secure Boot Variables
(PK, KEK, db, dbx). Change
takes effect after reboot.
Option only shows up when
keys are installed and “Factory
Default Key Provisioning” is Dis-
abled.
Set new (PK, KEK,
DB, DBX)
1. Launch the file browser to set
Efi Variable from the File
2. Else load Factory Defaults.
Image must be formatted as Efi
Variable with TimeBased
Authenticated Header
Delete (PK, KEK,
DB, DBX)
Delete the Variable from
NVRAM. Removing PK will reset
System to Setup Mode.
Append Var to
(KEK, DB, DBX)
Lauches the file browser to add
Key(s) from a file created as
1. Efi Variable with TimeBased
Authenticated Header or
2. Key Certificate wrapped into
EFI_SIGNATURE_LIST or Single
Certificate in X509_DER,
RSA2048_DER or SHA256_BIN
format.
Save Secure Boot
Keys
Store content of each Secure
Boot Variable (data formatted
as EFI_SIGNATURE_LIST) to a
file with matching name on
selected file system's root
folder.
Option only shows up when
keys are installed.
Table 37: Key Management Description (Continued)
S
ETUP
I
TEM
O
PTIONS
H
ELP
T
EXT
C
OMMENTS
