Table 6-3 Computer Setup—Advanced (for advanced users) (continued)
Option Heading
Secure Boot Conguration Congure Legacy Support and Secure Boot
Lets you turn o all legacy support on the computer, including booting to DOS, running legacy graphics
cards, booting to legacy devices, and so on.
Lets you be sure that an operating system is legitimate before booting to it, making Windows resistant to
malicious modication from preboot to full operating system booting, preventing rmware attacks. UEFI and
Windows Secure Boot only allow code signed by preapproved digital certicates to run during the rmware
and OS boot process.
● Legacy Support Enable and Secure Boot Disable
● Legacy Support Disable and Secure Boot Enable
● Legacy Support Disable and Secure Boot Disable
Default is Legacy Support Disable and Secure Boot Disable.
Secure Boot Key Management
Lets you manage the custom key settings.
Import Custom Secure Boot keys
Default is disabled.
Clear Secure Boot Keys
Lets you delete any previously loaded custom boot keys. Clearing keys will disable secure boot. Default is
disabled.
Reset Secure Boot keys to factory defaults
Default is disabled.
Enable MS UEFI CA key
Disabling this setting alters the Secure Boot key list to further restrict the allowed software components. Set
this option to disable to support Device Guard.
Ready BIOS for Device Guard Use
Requires BIOS Administrator password to be congured and Secure Boot to be enabled.
ENWW Computer Setup—Advanced 85