Asus H170M-PLUS - Page 78

PK Management
ThePlatformKey(PK)locksandsecuresthermwarefromanynon-permissible
changes.ThesystemveriesthePKbeforeyoursystementerstheOS.
Set New Key
ThisitemallowsyoutoloadthedownloadedPKfromaUSBstoragedevice.
ThePKlemustbeformattedasaUEFIvariablestructurewithtime-basedauthenticated
variable.
Delete Key
ThisitemallowsyoutodeletethePKfromyoursystem.OncethePKisdeleted,all
thesystemsSecureBootkeyswillnotbeactive.
Congurationoptions:[Yes][No]
KEK Management
TheKEK(Key-exchangeKeyorKeyEnrollmentKey)managestheSignaturedatabase
(db)andRevokedSignaturedatabase(dbx).
Key-exchangeKey(KEK)referstoMicrosoft
®
SecureBootKey-EnrollmentKey(KEK).
Set New Key
AllowsyoutoloadthedownloadedKEKfromaUSBstoragedevice.
Append Key
AllowsyoutoloadtheadditionalKEKfromastoragedeviceforanadditionaldband
dbxloadedmanagement.
Delete Key
AllowsyoutodeletetheKEKfromyoursystem.Congurationoptions:[Yes][No]
TheKEKlemustbeformattedasaUEFIvariablestructurewithtime-basedauthenticated
variable.
DB Management
Thedb(AuthorizedSignaturedatabase)liststhesignersorimagesofUEFI
applications,operatingsystemloaders,andUEFIdriversthatyoucanloadonthe
singlecomputer.
Set New Key
AllowsyoutoloadthedownloadeddbfromaUSBstoragedevice.
Append Key
Allowsyoutoloadtheadditionaldbfromastoragedevicesothatmoreimagescan
beloadedsecurely.
Delete Key
Allowsyoutodeletethedblefromyoursystem.
Congurationoptions:[Yes][No]
 TheDBlemustbeformattedasaUEFIvariablestructurewithtime-based
authenticatedvariable.
 UEFIexecutablelesincludeUEFIbootdevices,driversandapplications.
2-44 Chapter 2: Getting started