Asus Z170M-E D3 - 2.8.9 Secure Boot

Boot from Storage Devices [Legacy Only]
Allowsyoutoselectthetypeofstoragedevicesthatyouwanttolaunch.Conguration
options:[Ignore][Legacyonly][UEFIdriverrst]
Boot from PCI-E Expansion Devices [Legacy Only]
AllowsyoutoselectthetypeofPCIe/PCIexpansiondevicesthatyouwanttolaunch.
Congurationoptions:[Legacyonly][UEFIdriverrst]
2.8.9 Secure Boot
AllowsyoutoconguretheWindows
®
SecureBootsettingsandmanageitskeystoprotect
thesystemfromunauthorizedaccessandmalwaresduringPOST.
OS Type [Windows UEFI mode]
Allowsyoutoselectyourinstalledoperatingsystem.
[WindowsUEFImode] Thisitemallowsyoutoselectyourinstalledoperatingsystem.
ExecutetheMicrosoft
®
SecureBootcheck.Onlyselectthis
optionwhenbootingonWindows
®
UEFImodeorotherMicrosoft
®
SecureBootcompliantOS.
[OtherOS]  GettheoptimizedfunctionwhenbootingonWindows
®
non-UEFI
mode.Microsoft
®
SecureBootonlysupportsWindows
®
UEFI
mode.
Key Management
ThisallowsyoutomanagetheSecureBootkeys.
Install Default Secure Boot keys
ThisitemallowsyoutoimmediatelyloadthedefaultSecurityBootkeys,Platformkey
(PK),Key-exchangeKey(KEK),Signaturedatabase(db),andRevokedSignatures
(dbx).WhenthedefaultSecurebootkeysareloaded,alltheSecureBootkeysstate
willchangefromUnloadedmodetoloadedmode.
Save Secure Boot Keys
ThisitemallowsyoutosavealltheSecureBootkeystoaUSBstoragedevice.
PK Management
ThePlatformKey(PK)locksandsecuresthermwarefromanynon-permissible
changes.ThesystemveriesthePKbeforeyoursystementerstheOS.
Set New Key
ThisitemallowsyoutoloadthedownloadedPKfromaUSBstoragedevice.
Delete key
AllowsyoutodeletethePKfromyoursystem.OncethePKisdeleted,allthe
systemsSecureBootkeyswillnotbeactive.Congurationoptions:[Yes][No]
ThePKlemustbeformattedasapublickeycerticateorUEFIvariablestructurewith
time-basedauthenticatedvariable.
KEK Management
TheKEK(Key-exchangeKeyorKeyEnrollmentKey)managestheSignaturedatabase
(db)andRevokedSignaturedatabase(dbx).
ASUS Z170M-E D3 2-41