IBASE Technology MI999, Руководство пользователя

Страница: 68 / 79

60
MI999 User’s Manual
BIOS Setting Description
Secure Boot Mode
Secure Boot mode options: Standard or Custom.
In Custom mode, Secure Boot policy variables
can be configured by a physically present user
without full authentication.
Restore Factory Keys
Forces system to user mode. Install factory
default Secure Boot key databases.
Key Management
Enables expert users to modify Secure Boot
Policy variables without full authentication.
4.6.1.1. Key Management
BIOS Setting Description
Factory Key Provision
Install factory default Secure Boot keys after the
platform reset and while the system is in Setup
mode.
Restore Factory Keys
Forces system to use mode.
Install factory default Secure Boot Key
databases.
Enroll Efi Image
Allow the image to run in Secure Boot mode.
Enroll SHA256 Hash certificate of a PE image
into Authorized Signature Database (db).
Restore DB defaults Restore DB variable to factory defaults.
Secure Boot variable
Enroll factory defaults or load certificates from a
file.
1. Public key certificate: EFI_SIGNATIRE_LIST,
EFI_CERT_X509 (DER), EFI_CERT_RSA2048
(bin), EFI_CERT_SHAxxx
2. Authenticated UEFI Variable
3. EFI PE/COFF image (SHA256)