IBASE Technology MI836F, Руководство пользователя

Страница: 70 / 81

62
MI836F User’s Manual
BIOS Setting Description
Secure Boot Mode
Secure Boot mode options: Standard or Custom.
In Custom mode, Secure Boot policy variables
can be configured by a physically present user
without full authentication.
Restore Factory Keys
Forces system to user mode. Install factory
default Secure Boot key databases.
Key Management Enables expert users to modify Secure Boot
Policy variables without full authentication.
4.6.1.1. Key Management
BIOS Setting Description
Factory Key
Provision Install factory default Secure Boot keys after the
platform reset and while the system is in Setup mode.
Restore Factory
Keys Forces system to use mode. Install factory default
Secure Boot Key databases.
Enroll Efi Image
Allow the image to run in Secure Boot mode. Enroll
SHA256 Hash certificate of a PE image into
Authorized Signature Database (db).
Restore DB defaults Restore DB variable to factory defaults.
Secure Boot
variable
Enroll factory defaults or load certificates from a file.
1. Public key certificate: EFI_SIGNATIRE_LIST,
EFI_CERT_X509 (DER), EFI_CERT_RSA2048
(bin), EFI_CERT_SHAXXX
2. Authenticated UEFI Variable
3. EFI PE/COFF image (SHA256)
Key source: factory, external, mixed