30 | 5. Security Menu
Secure Boot
Secure Boot feature is active if secure boot is Enabled, when Platform Key(PK) is enrolled and the
System is in User mode. The mode change requires platform reset.
Options: Disabled (Default) / Enabled
Secure Boot Mode
Secure Boot mode options: Standard or Custom mode. In Custom mode, Secure Boot Policy
variables can be configured by a physically present user without full authentication.
Options: Custom (Default) / Standard
Restore Factory Keys
Force System to User Mode. Configure NVRAM to contain OEM-defined factory default Secure
Boot Keys.
Restore To Setup Mode
Delete NVRAM content of all UEFI Secure Boot Key databases.
Key Management
Factory Key Provision
Install factory default Keys on next re-boot only when system in setup mode.
Options: Disabled (Default) / Enabled
Restore Factory Keys
Force System to User Mode. Configure NVRAM to contain OEM-defined factory default Secure
Boot Keys.
Restore To Setup Mode
Delete NVRAM content of all UEFI Secure Boot Key databases.
Export Secure Boot variables
Copy NVRAM content of Secure Boot variables to files in a root folder on a file system device.
Enroll Efi Image
Allow the image to run in Secure Boot mode. Enroll SHA256 Hash certificate of a PE image into
Authorized Signature Database (db).
