Supermicro SuperServer 8048B-TRFT, User Manual

Page: 76 / 84

Chapter 7: BIOS
7-47 7-46
SUPERSERVER 8048B-TRFT USER'S MANUAL

Set New PK (Platform Key)
Select <Yes> to load default factory platform keys to your system. Select No to load
the default settings from other sources.
Key Exchange Key Database (KEK)

Delete KEK (Key Exchange Key)
Select <Yes> to confirm deletion of the KEK from the NVRAM (Non-Volatile RAM).

Set New KEK (Key Exchange Key)
Select <Yes> to confirm that a new KEK will be set in the NVRAM (Non-Volatile
RAM).

Append KEK (Key Exchange Key)
Select <Yes> to load the new KEK from the manufacture defaults. Select <No> to
load the new KEK from other sources.
Authorized Signature Database (DB)

Delete DB (DataBase)
Select <Yes> to confirm deletion of a database from the NVRAM (Non-Volatile
RAM).

Set New DB (DataBase)
Select <Yes> to confirm that a new database will be set in the NVRAM (Non-Volatile
RAM).

Append DB (DataBase)
Select <Yes> to load the new database from the manufacture defaults. Select <No>
to load the new database from other sources.
Forbidden Signature Database (DBX)

Delete DBX
Select <Yes> to confirm deletion of the DBX files from the Non-Volatile RAM
(NVRAM).
 Set New DBX
Select <Yes> to confirm that the new DBX files will be downloaded to the Non-
Volatile RAM (NVRAM).

Append DBX (DataBase Timer)
Select <Yes> to load the new DBX files from the manufacture defaults. Select <No>
to load the new DBX files from other sources.

Image Execution Policy
Internal FA
Select Always Execute for the BIOS to always execute Image-Execution Policy
commands on each device path when system security is compromised. The default
setting is
Always Execute .
Option ROM
Select Deny Execute to prevent the BIOS from executing Option ROM commands
to boot up a system from a network device when system security is compromised.
The options are Always Execute, Always Deny, Allow Execute, Defer Execute,
Deny
Execute and Query User.
Removable Media
Select Deny Execute to prevent the BIOS from executing critical system commands
issued by a removable device when system security is compromised. The options
are Always Execute, Always Deny, Allow Execute, Defer Execute,
Deny Execute
and Query User.
Fixed Media
Select Deny Execute to prevent the BIOS from executing critical system commands
issued by a fixed media device when system security is compromised. The options
are Always Execute, Always Deny, Allow Execute, Defer Execute, Deny Execute
and Query User.