44
The optional settings are: [Disabled]; [Enabled].
Secure Boot can be enabled if 1. System running in user mode with enrolled
Platform Key (PK); 2. CSM function is disabled.
Secure Boot Mode
The optional settings are: [Standard]; [Custom].
Set UEFI Secure Boot Mode to Standard mode or Custom mode. This change is
effective after save. After reset, this mode will return to Standard mode.
*When set as [Custom], user can make further settings in ‘Key Management’.
Key Management
This item enables experienced users to modify Secure Boot variables, witch
includes the following items:
Provision Factory Default Keys
This item is for user to install factory default secure boot keys when system is in
Setup Mode.
Enroll all Factory Default Keys
This item forces system to User Mode-install all Factory Default keys.
Save all Secure Boot Variables
This item will save all secure boot variables made by user.
Platform Key (PK)/Key Exchange Keys/Authorized Signature/Forbidden
Signature/ Authorized TimeStamps/OS Recovery Signatures
Use this item to enroll Factory Defaults or load the keys from a file with:
1. Public Key Certificate in:
a) EFI_SIGNATURE_LIST
b) EFI_ CERT_X509 (DER encoded)
c) EFI_ CERT_RSA2048 (bin)
d) EFI_ CERT_SHA256 (bin)
2. Authenticated UEFI Variable
