68 69
English
3.6.1 Key Management
In this section, expert users can modify Secure Boot Policy variables without full authenti-
cation.
Factory Key Provision
Install factory default Secure Boot keys aer the platform reset and while the System
is in Setup mode.
Install Default Secure Boot Keys
Please install default secure boot keys if it’s the rst time you use secure boot.
Clear Secure Boot keys
Force System to Setup Mode - clear all Secure Boot Variables. Change takes eect
aer reboot.
Export Secure Boot variables
Copy NVRAM content of Secure Boot variables to les in a root folder on a le
system device.
Enroll E Image
Allow the image to run in Secure Boot mode. Enroll SHA256 Hash certicate of a
PE image into Authorized Signature Database (db).