Asus B85M-G PLUS - KEK, DB, and DBX Key Management

2-38
Chapter 2: Getting started
KEK Management
TheKEK(Key-exchangeKeyorKeyEnrollmentKey)managestheSignaturedatabase
(db)andRevokedSignaturedatabase(dbx).
Key-exchangeKey(KEK)referstoMicrosoft
®
SecureBootKey-EnrollmentKey(KEK).
Delete the KEK
AllowsyoutodeletetheKEKfromyoursystem.Congurationoptions:
[Yes][No]
Load KEK from File
AllowsyoutoloadthedownloadedKEKfromaUSBstoragedevice.
Append KEK from file
AllowsyoutoloadtheadditionalKEKfromastoragedeviceforan
additionaldbanddbxloadedmanagement.
TheKEKlemustbeformattedasaUEFIvariablestructurewithtime-basedauthenticated
variable.
DB Management
Thedb(AuthorizedSignaturedatabase)liststhesignersorimagesofUEFI
applications,operatingsystemloaders,andUEFIdriversthatyoucanloadonthe
singlecomputer.
Delete the db
Allowsyoutodeletethedblefromyoursystem.Congurationoptions:
[Yes][No]
Load db from File
AllowsyoutoloadthedownloadeddbfromaUSBstoragedevice.
Append db from file
Allowsyoutoloadtheadditionaldbfromastoragedevicesothatmore
imagescanbeloadedsecurely.
TheDBlemustbeformattedasaUEFIvariablestructurewithtime-basedauthenticated
variable.
DBX Management
Thedbx(RevokedSignaturedatabase)liststheforbiddenimagesofdbitemsthatare
nolongertrustedandcannotbeloaded.
Delete the DBX
AllowsyoutodeletetheDBXlefromyoursystem.Congurationoptions:
[Yes][No]
Load DBX from File
AllowsyoutoloadthedownloadedDBXfromaUSBstoragedevice.
Append DBX from file
AllowsyoutoloadtheadditionalDBXfromastoragedevicesothatmore
dbsimagescannotbeloaded.
TheDBXlemustbeformattedasaUEFIvariablestructurewithtime-basedauthenticated
variable.