48
The optional settings: [Disabled]; [Enabled].
Secure Boot can be enabled if 1. System running in user mode with enrolled
Platform Key (PK); 2. CSM function is disabled.
Secure Boot Mode
The optional settings: [Standard]; [Custom].
Set UEFI Secure Boot Mode to Standard mode or Custom mode. This change is
effective after save. After reset, this mode will return to Standard mode.
When set as [
Custom
], user can make further settings in the following items that
show up:
Key Management
This item enables experienced users to modify Secure Boot variables.
Press [Enter] to make customized secure settings:
Provision Factory Default Keys
This item is for user to install factory default secure boot keys when system is in
Setup Mode.
The optional settings: [Disabled]; [Enabled].
Enroll All Factory Default Keys
This item forces system to User Mode-install all Factory Default keys.
Save all Secure Boot Variables
Secure Boot Variable/Size/Key#/Key Source
Platform Key (PK)/Key Exchange Keys/Authorized Signatures/Forbidden
Signatures/ Authorized TimeStamps/OSRecovery Signatures
Use this item to enroll Factory Defaults or load the keys from a file with:
1. Public Key Certificate in:
a) EFI_SIGNATURE_LIST
b) EFI_ CERT_X509 (DER encoded)
c) EFI_ CERT_RSA2048 (bin)
d) EFI_ CERT_SHA256 (bin)
2. Authenticated UEFI Variable
