Asus H170-PLUS D3 - Secure Boot Configuration; Secure Boot: OS Type and Key Management

2.8.8 Secure Boot
AllowsyoutoconguretheWindows
®
SecureBootsettingsandmanageitskeystoprotect
thesystemfromunauthorizedaccessandmalwaresduringPOST.
OS Type [Windows UEFI mode]
Allowsyoutoselectyourinstalledoperatingsystem.
[WindowsUEFImode] Thisitemallowsyoutoselectyourinstalledoperatingsystem.
ExecutetheMicrosoft
®
SecureBootcheck.Onlyselectthis
optionwhenbootingonWindows
®
UEFImodeorotherMicrosoft
®

SecureBootcompliantOS.
[OtherOS]  GettheoptimizedfunctionwhenbootingonWindows
®
non-UEFI
mode.Microsoft
®
SecureBootonlysupportsWindows
®
UEFI
mode.
Key Management
ThisallowsyoutomanagetheSecureBootkeys.
Install Default Secure Boot keys
ThisitemallowsyoutoimmediatelyloadthedefaultSecurityBootkeys,Platformkey
(PK),Key-exchangeKey(KEK),Signaturedatabase(db),andRevokedSignatures
(dbx).WhenthedefaultSecurebootkeysareloaded,alltheSecureBootkeysstate
willchangefromUnloadedmodetoloadedmode.
Clear Secure Boot keys
ThisitemappearsonlywhenyouloadthedefaultSecureBootkeys.Thisitemallows
youtoclearallthepreviouslyappliedSecureBootkeys.
Save Secure Boot Keys
ThisitemallowsyoutosavealltheSecureBootkeystoaUSBstoragedevice.
PK Management
ThePlatformKey(PK)locksandsecuresthermwarefromanynon-permissible
changes.ThesystemveriesthePKbeforeyoursystementerstheOS.
Delete PK
AllowsyoutodeletethePKfromyoursystem.OncethePKisdeleted,allthe
systemsSecureBootkeyswillnotbeactive.
Load Default PK
SelectYestoloadthesystemdefaultPKorselectNotoloadadownloadedPK
fromaUSBstoragedevice.
ThePKlemustbeformattedasaUEFIvariablestructurewithtime-basedauthenticated
variable.
KEK Management
TheKEK(Key-exchangeKeyorKeyEnrollmentKey)managestheSignaturedatabase
(db)andRevokedSignaturedatabase(dbx).
Key-exchangeKey(KEK)referstoMicrosoft
®
SecureBootKey-EnrollmentKey(KEK).
ASUS H170-PLUS D3 2-41