User Manual
Table Of Contents
- Safety information
- Chapter 1: Product Introduction
- Chapter 2: Hardware Information
- Chapter 3: Motherboard Information
- Chapter 4: BIOS Setup
- 4.1 Managing and updating your BIOS
- 4.2 BIOS setup program
- 4.3 Main menu
- 4.4 Performance Tuning menu
- 4.5 Advanced menu
- 4.5.1 Trusted Computing
- 4.5.2 ACPI Settings
- 4.5.3 Redfish Host Interface Settings
- 4.5.4 Onboard LAN Configuration
- 4.5.5 UEFI Variables Protection
- 4.5.6 Serial Port Console Redirection
- 4.5.7 SIO Configuration
- 4.5.8 PCI Subsystem Settings
- 4.5.9 USB Configuration
- 4.5.10 Network Stack Configuration
- 4.5.11 NVMe Configuration
- 4.5.12 APM Configuration
- 4.5.13 Tls Auth Configuration
- 4.5.14 Intel(R) Virtual RAID on CPU
- 4.5.15 Third-party UEFI driver configurations
- 4.6 Platform Configuration menu
- 4.7 Socket Configuration menu
- 4.8 Security menu
- 4.9 Boot menu
- 4.10 Tool menu
- 4.11 Event Logs menu
- 4.12 Server Mgmt menu
- 4.13 Exit menu
- Appendix
4-41
Install Default Secure Boot Keys
This option will load the default secure boot keys, including the PK (Platform key), KEK
(key-exchange key), db (signature database), and dbx (revoked signature database). All the
secure boot keys states will change from unloaded to loaded. Save changes and reset the
system for the changes to take effect.
Clear Secure Boot Keys
This option will delete all previously applied secure boot keys, including the PK (Platform
key), KEK (key-exchange key), db (signature database), and dbx (revoked signature
database). All the secure boot keys states will change from unloaded to loaded. Save
changes and reset the system for the changes to take effect.
Key Management
This item only appears when the item Secure Boot Mode is set to [Custom]. The Key
Management item allows you to modify Secure Boot variables and set Key Management
page.
Factory Key Provision [Enabled]
Allows you to provision factory default Secure Boot keys when the system is in Setup
Mode.
Configuration options: [Disabled] [Enabled]
Install Default Secure Boot Keys
This option will load the default secure boot keys, including the PK (Platform key), KEK
(key-exchange key), db (signature database), and dbx (revoked signature database).
All the secure boot keys states will change from unloaded to loaded. Save changes
and reset the system for the changes to take effect.
Clear Secure Boot Keys
This option will delete all previously applied secure boot keys, including the PK
(Platform key), KEK (key-exchange key), db (signature database), and dbx (revoked
signature database). All the secure boot keys states will change from unloaded to
loaded. Save changes and reset the system for the changes to take effect.
PK Management
Configuration options: [Details] [Save To File] [Set New Key] [Delete key]
KEK Management / DB Management / DBX Management\
Configuration options: [Details] [Save To File] [Set New Key] [Append Key] [Delete key]
DB Management / DB Management / DBX Management
Configuration options: [Details] [Save To File] [Set New Key] [Append Key] [Delete key]
DBX Management / DB Management / DBX Management
Configuration options: [Details] [Save To File] [Set New Key] [Append Key] [Delete key]
Authorized TimeStamps / OsRecovery Signatures
Configuration options: [Set New Key] [Append Key]
Save all Secure Boot Variables
This option will save NVRAM content of Secure Boot policy variables to the file (EFI_
SIGNATURE_LIST data format) in root foler on a target file system device.