Supermicro SuperServer 5019S-WR, Руководство пользователя

Страница: 46 / 62

Chapter 6: BIOS
89 88
SuperServer 5019S-WR User's Manual
6.6 Security
This menu allows the user to configure the following security settings for the system.
Password Check
Select Setup for the system to check for a password at Setup. Select Always for the system
to check for a password at bootup or upon entering the BIOS Setup utility. The options are
Setup
and Always.
Administrator Password
Press Enter to create a new, or change an existing Administrator password.

Secure Boot Menu
This section displays the contents of the following secure boot features:
•
System Mode
•
Secure Boot
•
Vendor Keys
Secure Boot
Use this item to enable secure boot. The options are Disabled and Enabled.
Secure Boot Mode
Use this item to select the secure boot mode. The options are Standard and Custom .
CSM Support
Select Enabled to support the EFI Compatibility Support Module (CSM), which provides
compatibility support for traditional legacy BIOS for system boot. The options are
Enabled
and Disabled.

Key Management
This submenu allows the user to configure the following Key Management settings.
Provision Factory Default Keys
Select Enabled to install the default Secure-Boot keys set by the manufacturer. The options
are
Disabled and Enabled.

Enroll All Factory Default Keys
Select Yes to install all default secure keys set by the manufacturer. The options are Yes
and No.
Save All Secure Boot Variables
This feature allows the user to decide if all secure boot variables should be saved.

Platform Key (PK)
This feature allows the user to configure the settings of the platform keys.
Set New Key
Select Yes to load the new platform keys (PK) from the manufacturer's defaults. Select No
to load the platform keys from a file. The options are
Yes
and No.

Key Exchange Key
Set New Key
Select Yes to load the KEK from the manufacturer's defaults. Select No to load the KEK from
a file. The options are Yes and No.
Append Key
Select Yes to add the KEK from the manufacturer's defaults list to the existing KEK. Select
No to load the KEK from a file. The options are Yes and No.

Authorized Signatures
Set New Key
Select Yes to load the database from the manufacturer's defaults. Select No to load the DB
from a file. The options are Yes and No.