Gigabyte R161-R12 - Page 111

- 111 - BIOS Setup
Parameter
Description
Key Management
Press [Enter] to congure advanced items.
Please note that this item is congurable when Secure Boot Mode is set
to Custom.

Factory Key Provision
– Allows to provision factory default Secure Boot keys when system is in
Setup Mode.
– Options available: Enabled/Disabled. Default setting is Disabled.

Restore Factory Keys
– Installs all factory default keys. It will force the system in User Mode.
– Options available: Yes/No.

Reset To Setup Mode
– Delete NVRAM content of all UEFI Secure Boot key databases.

Export Secure Boot variables
– Copy NVRAM content of Secure Boot variables to les in a root folder
on a le system device.

Enroll E Image
– Press [Enter] to enroll SHA256 hash of the binary into Authorized
Signature Database (db).

Device Guard Ready

Remove 'UEFI CA' from DB
– Remove 'Microsoft UEFI CA' certicate from Authorized Signature
datatbase.

Restore DB defaults
– Restore the DB variable to factory defaults.

Secure Boot variable

Platform Key (PK)
– Displays the current status of the Platform Key (PK).
– Press [Enter] to congure a new PK.
– Options available: Set New.

Key Exchange Keys (KEK)
– Displays the current status of the Key Exchange Key Database (KEK).
– Press [Enter] to congure a new KEK or load additional KEK from
storage devices.
– Options available: Set New/Append.

Authorized Signatures (DB)
– Displays the current status of the Authorized Signature Database.
– Press [Enter] to congure a new DB or load additional DB from storage
devices.
– Options available: Set New/Append.

Forbidden Signatures (DBX)
– Displays the current status of the Forbidden Signature Database.
– Press [Enter] to congure a new dbx or load additional dbx from
storage devices.
– Options available: Set New/Append.