41
The optional settings are: [Disabled]; [Enabled].
Secure Boot feature is active if Secure Boot is enabled, Platform Key (PK) is
enrolled and the system is in User mode. The mode change requires platform
reset.
Secure Boot Mode
The optional settings are: [Standard]; [Custom].
Set UEFI Secure Boot Mode to Standard mode or Custom mode. This change is
effective after save. After reset, this mode will return to Standard mode.
In Custom mode, Secure Boot Policy variables can be configured by a physically
present user without full authentication.
*When set as [
Custom
], user can make further settings in the following items that
show up:
Restore Factory Keys
Use this item to force system to User Mode, to install factory default Secure Boot
key databases.
Reset To Setup Mode
Use this item to delete all Secure Boot Key databases from NVRAM.
Key Management
This item enables experienced users to modify Secure Boot variables, which
includes the following items:
Factory Key Provision
This item is for user to install factory default secure boot keys after the platform
reset and while the system is in Setup mode.
The optional settings are: [Disabled]; [Enabled].
Restore Factory Keys
Use this item to force system into User Mode. Install factory default Secure Boot
Key databases.
Reset to Setup Mode
Use this item to delete all Secure Boot key databases from NVRAM.
Export Secure Boot variables
Use this item to copy NVRAM content of Secure Boot variables to files in a root
folder on a file system device.
