Appendix F: Secure Boot Settings
159
Key Exchange Key
The Key Exchange Key (KEK), which is held by the operating system vendor, can be
updated by the holder of the PK and be used by secure boot to protect access to signa
-
tures databases. The options are
Details
, Export, Update, Append, and Delete. Select
Details to display detailed information of KEKs. Select Export to save the current KEKs
to a FAT formatted USB flash drive. Select Update to load the factory defaults or load
KEKs from a file on the external device. Select Append to load the factory defaults or
load KEKs from a file on the external device. Select Delete to clear the current KEKs or
to delete only one certificate from the key database. (Refer to page
process. Refer to pages
,
,
, and
Append: Use the arrow keys to select Append.
