38
User's Manual |
GM341-GHF
Chapter 7
Secure Boot
This section configures Secure Boot settings. This function is designed for advanced users; be
careful when changing these settings. It’s possible to cause the system not to start properly.
Secure Boot
Secure Boot helps ensure that the system boot executes only firmware that is trusted by
the manufacturer. This function can be enabled if the Platform Key (PK) is enrolled, and the
System Mode is user/deployed and the CSM (please refer to “Advanced” > “CSM Configura-
tion” earlier in this chapter) is disabled.
Secure Boot Customization
Select Custom to customize the "Secure Boot" function or "Standard" to use the standard
feature. If it is set to "Custom", the following functions can be configured:
Restore Factory Keys
Select "Yes" to force the system to use the factory defaults settings. It will set the system to
be in the "User Mode". It will also configure the NVRAM to contain pre-defined factory default
Secure Boot keys.
Reset To Setup Mode
Select "Yes" to delete all UEFI secure boot keys stored in the NVRAM. It will also
revert the system back to the Setup mode.
Key Management
Manage Secure Boot keys such as Platform Key and Key Exchange Keys.