Supermicro SUPERSERVER 5028D-TN4T, User Manual

Page: 109 / 118

Chapter 6: AMI BIOS
7-31
Secure Boot
Use this item to enable secure boot. The options are
Disabled
and Enabled.
Secure Boot Mode
Use this item to select the secure boot mode. The options are Standard and
Custom.
 Key Management
This submenu allows the user to configure the following Key Management settings.
Factory Default Key Provision
Select Enabled to install the default Secure-Boot keys set by the manufacturer. The
options are
Disabled
and Enabled.
 Enroll All Factory Default Keys
Select Yes to install all default secure keys set by the manufacturer. The options
are
Yes and No.
Save All Secure Boot Variables
This feature allows the user to decide if all secure boot variables should be saved.
 Platform Key (PK)
This feature allows the user to configure the settings of the platform keys.
Set New Key
Select Yes to load the new platform keys (PK) from the manufacturer's defaults.
Select No to load the platform keys from a file. The options are Yes and No.

Key Exchange Key (KEK)
Set New Key
Select Yes to load the KEK from the manufacturer's defaults. Select No to load the
KEK from a file. The options are Yes and No.
Append Key
Select Yes to add the KEK from the manufacturer's defaults list to the existing KEK.
Select No to load the KEK from a file. The options are Yes and No.