Version 2.17.1249. Copyright (C) 2015 American Megatrends, Inc.
Provision Factory Default Keys
Install Factory default Secure Boot Keys when System is in Setup Mode.
Enroll All Factory Default Key
Force System to User Mode - install all Factory Default keys(PK, KEK, db, dbx, dbt).
Change takes effect after reboot
Save All Secure Boot Variables
Save NVRAM content of all Secure Boot variables to the files
(EFI_SIGNATURE_LIST data format) in root folder on a target files system device.
Size:0, Key#:0, Key source: *
Insert Factory Default Keys or load from a file formatted as:
1.Public Key Certificate in:
a)EFI_SIGNATURE_LIST,
b)EFI_CERT_X509 (DER encoded),
c)EFI_CERT_RSA2048 (bin),
d)EFI_CERT_SHA256 (bin)
2.Authenticated UEFI Variable
Key source: Default, Custom, Mixed (*) modified through Setup menu
Press Enter when selected to go into the associated Sub-Menu “Key Management”.
Size:0, Key#:0, Key source: *
Insert Factory Default Keys or load from a file formatted as:
1.Public Key Certificate in:
a)EFI_SIGNATURE_LIST,
b)EFI_CERT_X509 (DER encoded),
c)EFI_CERT_RSA2048 (bin),
d)EFI_CERT_SHA256 (bin)
2.Authenticated UEFI Variable
Key source: Default, Custom, Mixed (*) modified through Setup menu
Press Enter when selected to go into the associated Sub-Menu.
Size:0, Key#:0, Key source: *
Insert Factory Default Keys or load from a file formatted as: