Asus B85M-G PLUS - Secure Boot (System Security); OS Type and Key Management

ASUS B85M-G PLUS
2-37
Boot from PCI-E/PCI Expansion Devices [Legacy OpROM first]
AllowsyoutoselectthetypeofPCIe/PCIexpansiondevicesthatyouwanttolaunch.
Congurationoptions:[LegacyOpROMrst][UEFIdriverrst]
2.8.9 Secure Boot
AllowsyoutoconguretheWindows
®
SecureBootsettingsandmanageitskeystoprotect
thesystemfromunauthorizedaccessandmalwaresduringPOST.
OS Type [Windows UE...]
Allowsyoutoselectyourinstalledoperatingsystem.
[WindowsUEFImode] ExecutestheMicrosoft
®
SecureBootcheck.Onlyselectthis
optionwhenbootingonWindows
®
UEFImodeorotherMicrosoft
®
SecureBootcompliantOS.
[OtherOS]  GettheoptimizedfunctionwhenbootingonWindows
®
non-UEFI
mode,Windows
®
Vista/XP,orotherMicrosoft
®
SecureBoot
non-compliantOS.OnlyonWindows
®
UEFImodethatMicrosoft
®
SecureBootcanfunctionproperly.
ThefollowingitemappearswhenOS Typeissetto[Windows UEFI mode].
Key Management
ThisitemappearsonlywhenyousetOSTypeto[WindowsUEFImode].Itallowsyouto
managetheSecureBootkeys.
Install Default Secure Boot keys
ThisitemallowsyoutoimmediatelyloadthedefaultSecurityBootkeys,Platformkey
(PK),Key-exchangeKey(KEK),Signaturedatabase(db),andRevokedSignatures
(dbx).WhenthedefaultSecurebootkeysareloaded,alltheSecureBootkeysstate
willchangefromUnloadedmodetoloadedmode.
Clear Secure Boot keys
ThisitemappearsonlywhenyouloadthedefaultSecureBootkeys.Thisitemallows
youtoclearalldefaultSecureBootkeys.
Save Secure Boot keys
ThisitemappearsonlywhenyouloadthedefaultSecureBootkeys.Thisitemallows
youtosavealldefaultSecureBootkeys.
PK Management
ThePlatformKey(PK)locksandsecuresthermwarefromanynon-permissible
changes.ThesystemveriesthePKbeforeyoursystementerstheOS.
Delete PK
AllowsyoutodeletethePKfromyoursystem.OncethePKisdeleted,all
thesystemsSecureBootkeyswillnotbeactive.Congurationoptions:
[Yes][No]
Load PK from File
AllowsyoutoloadthedownloadedPKfromaUSBstoragedevice.
ThePKlemustbeformattedasaUEFIvariablestructurewithtime-basedauthenticated
variable.