Gigabyte R282-Z93 - Page 114

BIOS Setup - 114 -
Parameter Description
Key Management
(continued)

Factory Key Provision
– Installs factory default Secure Boot keys after the platform resets and
the system is in Setup Mode.
– Options available: Disabled/Enabled. Default setting is Disabled.

Restore Factory Keys
– Installs factory default Secure Boot key databases. It will force the
system in User Mode.
– Options available: Yes/No.

Enroll E Image
– Press [Enter] to enroll SHA256 hash of the binary into Authorized
Signature Database (db).

Restore DB defaults
– Press [Enter] to restore DB variable to factory defaults.
– Options available: Yes/No.

Secure Boot variable
– Displays the current status of the variables used for secure boot.

Platform Key (PK)
– Displays the current status of the Platform Key (PK).
– Press [Enter] to congure a new PK.
– Options available: Set Update.

Key Exchange Keys (KEK)
– Displays the current status of the Key Exchange Key Database (KEK).
– Press [Enter] to congure a new KEK or load additional KEK from
storage devices.
– Options available: Set Update/Append.

Authorized Signatures (DB)
– Displays the current status of the Authorized Signature Database.
– Press [Enter] to congure a new DB or load additional DB from storage
devices.
– Options available: Set Update/Append.

Forbidden Signatures (DBX)
– Displays the current status of the Forbidden Signature Database.
– Press [Enter] to congure a new dbx or load additional dbx from storage
devices.
– Options available: Set Update/Append.

Authorized TimeStamps (DBT)
– Displays the current status of the Authorized TimeStamps Database.
– Press [Enter] to congure a new DBT or load additional DBT from
storage devices.
– Options available: Set Update/Append.

OsRecovery Signatures
– Displays the current status of the OsRecovery Signature Database.
– Press [Enter] to congure a new OsRecovery Signature or load
additional OsRecovery Signature from storage devices.
– Options available: Set Update/Append.