Chapter 4: BIOS
95
Secure Boot
This section displays the contents of the following secure boot features:
•
System Mode
•
Vendor Keys
•
Secure Boot
Secure Boot
Use this feature to enable secure boot. The options are
Disabled
and Enabled.
Secure Boot Mode
Use this item to configure Secure Boot variables without authentication. The options are
Standard and
Custom
.
CSM Support
This feature is for manufacturing debugging purposes.
Enter Audit Mode
This submenu can only be used if current System Mode is set to User (refer to Exit Deployed
Mode). The PK variable will be erased on transition to Audit Mode.
Enter Deployed Mode
Press <Enter> button to transition between Deployment and User Mode.
Key Management
This submenu allows you to configure the following Key Management settings.
Provision Factory Default
Select Enabled to install the default Secure Boot keys set by the manufacturer. The op-
tions are
Disabled
and Enabled.
Restore Factory Keys
Force System to User Mode. Install factory default Secure Boot key databases.
Reset to Setup Mode
This feature deletes all Secure Boot key databases from NVRAM.