User manual

KEK Management
Key‑exchange Key (KEK) refers to Microsoft
®
Secure Boot Key‑Enrollment Key (KEK).
Delete Key
Allows you to delete the KEK from your system.
Conguration options: [Yes] [No]
Set New Key
Allows you to load the downloaded KEK from a USB storage device.
Append Key
Allows you to load the additional KEK from a storage device for an additional db and
dbx loaded management.
The KEK le must be formatted as a UEFI variable structure with time‑based authenticated
variable.
DB Management
Delete Key
Allows you to delete the db le from your system.
Conguration options: [Yes] [No]
Set New Key
Allows you to load the downloaded db from a USB storage device.
Append Key
Allows you to load the additional db from a storage device so that more images can be
loaded securely.
The db le must be formatted as a UEFI variable structure with time‑based authenticated
variable. DBX Management
DBX Management
Delete Key
Allows you to delete the dbx le from your system.
Set New Key
Allows you to load the downloaded dbx from a USB storage device.
Conguration options: [Yes] [No]
Append Key
Allows you to load the additional dbx from a storage device so that more db’s images
cannot be loaded.
The dbx le must be formatted as a UEFI variable structure with time‑based authenticated
variable.
2-44 Chapter 2: Getting started