Supermicro A2SAP-H - Chapter 4 BIOS - Secure Boot Options; Secure Boot Mode Selection; Key Management Settings; Provision Factory Default Keys

A2SAP-H/-E/-L User's Manual
74
Secure Boot Mode
This feature allows the user to select the desired secure boot mode for the system. The
options are Standard and Customized.
If Secure Boot Mode is set to Customized, Key Management features will be available
for conguration:
Key Management
This submenu allows the user to congure the following Key Management settings.
Provision Factory Default Keys
Select Enabled to install the default Secure Boot keys set by the manufacturer. The options
are Disabled and Enabled.
Install Factory Default keys
Select Yes to install the default settings for all keys. The options are Yes and No.
Enroll All Factory Default Keys
Select Yes to install all default secure keys set by the manufacturer. The options are Yes
and No.
Save All Secure Boot Variables
This feature allows the user to decide if all secure boot variables should be saved.
Platform Key (PK)
This feature allows the user to congure the settings of the platform keys.
Set New Var
Select Yes to load the new platform keys (PK) from the manufacturer's defaults. Select No
to load the platform keys from a le. The options are Yes and No.
Key Exchange Keys (KEK)
Set New Var
Select Yes to load the KEK from the manufacturer's defaults. Select No to load the KEK
from a le. The options are Yes and No.
Append Key
Select Yes to add the KEK from the manufacturer's defaults list to the existing KEK. Select
No to load the KEK from a le. The options are Yes and No.
Authorized Signatures
Set New Var
Select Yes to load the database from the manufacturer's defaults. Select No to load the
DB from a le. The options are Yes and No.