Asus H97I-PLUS - Page 76

2.8.10 Secure Boot
AllowsyoutoconguretheWindows
®
SecureBootsettingsandmanageitskeystoprotect
thesystemfromunauthorizedaccessandmalwaresduringPOST.
OS Type [Windows UEFI mode]
Allowsyoutoselectyourinstalledoperatingsystem.
[WindowsUEFImode] Thisitemallowsyoutoselectyourinstalledoperatingsystem.
ExecutetheMicrosoft
®
SecureBootcheck.Onlyselectthis
optionwhenbootingonWindows
®
UEFImodeorotherMicrosoft
®
SecureBootcompliantOS.
[OtherOS]  GettheoptimizedfunctionwhenbootingonWindows
®
non-UEFI
mode.Microsoft
®
SecureBootonlysupportsWindows
®
UEFI
mode.
Key Management
ThisallowsyoutomanagetheSecureBootkeys.
Install Default Secure Boot keys
ThisitemallowsyoutoimmediatelyloadthedefaultSecurityBootkeys,Platformkey
(PK),Key-exchangeKey(KEK),Signaturedatabase(db),andRevokedSignatures
(dbx).WhenthedefaultSecurebootkeysareloaded,alltheSecureBootkeysstate
willchangefromUnloadedmodetoloadedmode.
Clear Secure Boot keys
ThisitemappearsonlywhenyouloadthedefaultSecureBootkeys.Thisitemallows
youtoclearallthepreviouslyappliedSecureBootkeys.
Save Secure Boot Keys
ThisitemallowsyoutosavealltheSecureBootkeystoaUSBstoragedevice.
PK Management
ThePlatformKey(PK)locksandsecuresthermwarefromanynon-permissible
changes.ThesystemveriesthePKbeforeyoursystementerstheOS.
Delete PK
AllowsyoutodeletethePKfromyoursystem.OncethePKisdeleted,allthe
systemsSecureBootkeyswillnotbeactive.
Load Default PK
SelectYestoloadthesystemdefaultPKorselectNotoloadadownloadedPK
fromaUSBstoragedevice.
ThePKlemustbeformattedasaUEFIvariablestructurewithtime-basedauthenticated
variable.
2-44 Chapter 2: Getting started