Asus H110I-PLUS D3 - Page 63

Delete key
AllowsyoutodeletethePKfromyoursystem.OncethePKisdeleted,allthe
systemsSecureBootkeyswillnotbeactive.Congurationoptions:[Yes][No]
ThePKlemustbeformattedasapublickeycerticateorUEFIvariablestructurewith
time-basedauthenticatedvariable.
KEK Management
TheKEK(Key-exchangeKeyorKeyEnrollmentKey)managestheSignaturedatabase
(db)andRevokedSignaturedatabase(dbx).
Key-exchangeKey(KEK)referstoMicrosoft
®
SecureBootKey-EnrollmentKey(KEK).
Set New Key
AllowsyoutoloadthedownloadedKEKfromaUSBstoragedevice.
Append Key
AllowsyoutoloadtheadditionalKEKfromastoragedeviceforanadditionaldband
dbxloadedmanagement.
TheKEKlemustbeformattedasapublickeycerticateorUEFIvariablestructurewith
time-basedauthenticatedvariable.
Delete key
AllowsyoutodeletetheKeyfromyoursystem.Congurationoptions:[Yes][No]
DB Management
Thedb(AuthorizedSignaturedatabase)liststhesignersorimagesofUEFI
applications,operatingsystemloaders,andUEFIdriversthatyoucanloadonthe
singlecomputer.
Set New Key
AllowsyoutoloadthedownloadeddbfromaUSBstoragedevice.
Append Key
AllowsyoutoloadtheadditionalKEKfromastoragedeviceforanadditionaldband
dbxloadedmanagement.
TheDBlemustbeformattedasapublickeycerticateorUEFIvariablestructurewith
time-basedauthenticatedvariable.
Delete key
AllowsyoutodeletetheKeyfromyoursystem.Congurationoptions:[Yes][No]
DBX Management
TheDBX(RevokedSignaturedatabase)liststheforbiddenimagesofdbitemsthatare
nolongertrustedandcannotbeloaded.
Set New Key
AllowsyoutoloadthedownloadeddbxfromaUSBstoragedevice.
Append Key
AllowsyoutoloadtheadditionalKEKfromastoragedeviceforanadditionaldband
dbxloadedmanagement.
ASUS H110I-PLUS D3 2-35