Asus Z170M-E D3 - Secure Boot Key Management

Key-exchangeKey(KEK)referstoMicrosoft
®
SecureBootKey-EnrollmentKey(KEK).
Set New Key
AllowsyoutoloadthedownloadedKEKfromaUSBstoragedevice.
Append Key
AllowsyoutoloadtheadditionalKEKfromastoragedeviceforanadditionaldband
dbxloadedmanagement.
TheKEKlemustbeformattedasapublickeycerticateorUEFIvariablestructurewith
time-basedauthenticatedvariable.
Delete key
AllowsyoutodeletetheKeyfromyoursystem.Congurationoptions:[Yes][No]
DB Management
Thedb(AuthorizedSignaturedatabase)liststhesignersorimagesofUEFI
applications,operatingsystemloaders,andUEFIdriversthatyoucanloadonthe
singlecomputer.
Set New Key
AllowsyoutoloadthedownloadeddbfromaUSBstoragedevice.
Append Key
AllowsyoutoloadtheadditionalKEKfromastoragedeviceforanadditionaldband
dbxloadedmanagement.
TheDBlemustbeformattedasapublickeycerticateorUEFIvariablestructurewith
time-basedauthenticatedvariable.
Delete key
AllowsyoutodeletetheKeyfromyoursystem.Congurationoptions:[Yes][No]
DBX Management
TheDBX(RevokedSignaturedatabase)liststheforbiddenimagesofdbitemsthatare
nolongertrustedandcannotbeloaded.
Set New Key
AllowsyoutoloadthedownloadeddbxfromaUSBstoragedevice.
Append Key
AllowsyoutoloadtheadditionalKEKfromastoragedeviceforanadditionaldband
dbxloadedmanagement.
TheDBXlemustbeformattedasapublickeycerticateorUEFIvariablestructurewith
time-basedauthenticatedvariable.
Delete key
AllowsyoutodeletetheKeyfromyoursystem.Congurationoptions:[Yes][No]
2-42
Chapter 2: Getting started