Dell E33S001 - Secure Boot Custom Policy Settings Screen Details; Miscellaneous Settings Details

Option Description
Secure Boot Policy When Secure Boot policy is set to Standard, the BIOS uses the system manufacturer’s key and certicates to
authenticate pre-boot images. When Secure Boot policy is set to Custom, the BIOS uses the user-dened key and
certicates. Secure Boot policy is set to Standard by default.
Secure Boot Policy
Summary
Species the list of certicates and hashes that secure boot uses to authenticate images.
Secure Boot Custom Policy Settings screen details
Secure Boot Custom Policy Settings is displayed only when the Secure Boot Policy option is set to Custom.
To view the Secure Boot Custom Policy Settings screen, click System Setup Main Menu > System BIOS > System Security > Secure
Boot Custom Policy Settings
.
The Secure Boot Custom Policy Settings screen details are explained as follows:
Option
Description
Platform Key Imports, exports, deletes, or restores the platform key (PK).
Key Exchange Key
Database
Enables you to import, export, delete, or restore entries in the Key Exchange Key (KEK) Database.
Authorized
Signature Database
Imports, exports, deletes, or restores entries in the Authorized Signature Database (db).
Forbidden
Signature Database
Imports, exports, deletes, or restores entries in the Forbidden Signature Database (dbx).
Miscellaneous Settings details
The Miscellaneous Settings screen details are explained as follows:
Option
Description
System Time Enables you to set the time on the system.
System Date Enables you to set the date on the system.
Asset Tag Species the asset tag and enables you to modify it for security and tracking purposes.
Keyboard NumLock Enables you to set whether the system boots with the NumLock enabled or disabled. This option is set to On by
default.
NOTE: This option does not apply to 84-key keyboards.
F1/F2 Prompt on
Error
Enables or disables the F1/F2 prompt on error. This option is set to Enabled by default. The F1/F2 prompt also
includes keyboard errors.
Load Legacy Video
Option ROM
Enables you to determine whether the system BIOS loads the legacy video (INT 10H) option ROM from the video
controller. Selecting Enabled in the operating system does not support UEFI video output standards. This eld is
available only for UEFI boot mode. You cannot set the option to Enabled if UEFI Secure Boot mode is enabled.
In-System
Characterization
Enables or disables In-System Characterization. This option is set to Disabled by default. The two other options
are Enabled and Enabled - No Reboot.
NOTE: The default setting for In-System Characterization is subject to change in future BIOS releases.
When enabled, In-System Characterization (ISC) executes during POST upon detecting relevant changes in
system conguration to optimize system power and performance. ISC takes about 20 seconds to execute, and
Pre-operating system management applications 45