User's Manual
2‑38
Chapter 2: BIOS Setup
2.8.9 Secure Boot
Allows you to congure the Windows secure boot settings and manage the secure boot keys.
OS Type [Windows UEFI mode]
Allows you to select your installed operating system.
[Windows UEFI mode] This item allows you to execute the Microsoft secure
boot check. Only select this option when booting on
Windows UEFI mode or other Microsoft secure boot
compliant OS.
[Other OS] This item allows you to get the optimized functions
when booting on Windows non‑UEFI mode and
Microsoft secure boot non‑compliant OS.
Key Management
This allows you to manage the Secure Boot keys.
Install Default Secure Boot Keys
This item allows you to load the default secure boot keys, including the PK (Platform
Key), KEK (Key‑Exchange Key), DB (signature database), and DBX (revoked signature
database). All the secure boot keys states will change from unloaded to loaded. Save
changes and reset the system for the change to take effect.
Save Secure Boot Keys
This item allows you to save all the secure boot keys to a USB storage device.
PK Management
The PK (Platform Key) locks and secures the rmware from any non‑permissible
changes. The system veries the PK before your system enters the OS.
Set New Key
This item allows you to load the downloaded PK from a USB storage
device.
Delete Key
Allows you to delete the PK from your system. Once the PK is deleted, all
the system’s secure boot keys will not be active.
The PK le must be formatted as a Public Key Certicate or UEFI variable structure with
time‑based authenticated variable.
KEK Management
The KEK (Key‑Exchange Key) manages the DB (signature database) and DBX
(revoked signature database).
Set New Key
Allows you to load the downloaded KEK from a USB storage device.
Append Key
Allows you to load the additional KEK from a storage device for an
additional DB and DBX loaded management.
The KEK le must be formatted as a Public Key Certicate or UEFI variable structure with
time‑based authenticated variable.