32 | 5. Security Menu
Secure Boot
Secure Boot feature is acve if secure boot is Enabled, when Plaorm Key(PK) is enrolled and the
System is in User mode. The mode change requires plaorm reset.
Secure Boot Mode
Secure Boot mode opons: Standard or Custom mode. In Custom mode, Secure Boot Policy
variables can be congured by a physically present user without full authencaon.
Force System to User Mode. Congure NVRAM to contain OEM-dened factory default Secure
Boot Keys.
Restore To Setup Mode
Delete NVRAM content of all UEFI Secure Boot Key databases.
Install factory default Keys on next re-boot only when system in setup mode.
Force System to User Mode. Congure NVRAM to contain OEM-dened factory default Secure
Boot Keys.
Restore To Setup Mode
Delete NVRAM content of all UEFI Secure Boot Key databases.
Export Secure Boot variables
Copy NVRAM content of Secure Boot variables to les in a root folder on a le system device.
Allow the image to run in Secure Boot mode. Enroll SHA256 Hash cercate of a PE image into
Authorized Signature Database (db).