Chapter 4: UEFI BIOS
121
Export Secure Boot Variables
This feature is used to copy the NVRAM content of Secure Boot variables to a storage device.
Enroll EFI Image
Select this feature and press <Enter> to specify an EFI (Extensible Firmware Interface) image
for the system to use when it operates in the Secure Boot mode.
Device Guard Ready
Remove 'UEFI CA' from DB
Select Yes to remove UEFI CA from the database. The options are
Yes
and No.
Restore DB defaults
Select Yes to restore database variables to the manufacturer default settings. The options
are
Yes
and No.
Secure Boot Variable/Size/Keys/Key Source
Platform Key (PK)
This feature allows the user to enter and configure a set of values to be used as platform
firmware keys for the system. The sizes, keys numbers, and key sources of the platform keys
will be indicated as well. Select Update to update the platform key.
Key Exchange Keys
This feature allows the user to enter and configure a set of values to be used as Key-Exchange-
Keys for the system. The sizes, keys numbers, and key sources of the Key-Exchange-Keys
will be indicated as well. Select Update to update your "Key Exchange Keys". Select Append
to append your "Key Exchange Keys".
Authorized Signatures
This feature allows the user to enter and configure a set of values to be used as Authorized
Signatures for the system. These values also indicate the sizes, keys numbers, and the
sources of the authorized signatures. Select Update to update your "Authorized Signatures".
Select Append to append your "Authorized Signatures". The settings are Details, Export,
Update, Append, and Delete.
