Chapter 4: BIOS
101
Secure Boot Mode
Use this item to configure Secure Boot variables without authentication. The options are
Standard and
Custom
.
CSM Support
Select Enabled to support the EFI Compatibility Support Module (CSM), which provides
compatibility support for traditional legacy BIOS for system boot. The options are
Enabled
and Disabled.
Reset to Setup Mode
Use this item to delete the content of all UEFI Secure Boot key databases. This will put
the system in Setup mode. The options are
Yes
and No.
Restore Factory Keys
Use this item to reset the content of all UEFI Secure Boot key databases to their manu-
facturer default values. The options are
Yes
and No.
Export Secure Boot Variables
This item becomes configurable when a key is installed. Use this item to export Secure
Boot Variables.
Key Management
This submenu allows the user to configure the following Key Management settings.
Provision Factory Defaults
Select Enabled to install the default Secure Boot keys set by the manufacturer. The op-
tions are
Disabled
and Enabled.
Enroll EFI Image
This feature allows the image to run in Secure Boot mode. Enroll SHA256 Hash Certicate
of the image into the Authorized Signature Database.
Platform Key (PK)
This feature allows the user to configure the settings of the platform keys.