Chapter 6: BIOS
93
Secure Boot Mode
This feature allows the user to select the desired secure boot mode for the system. The
options are Standard and Customized.
*If Secure Boot Mode is set to Customized, Key Management features are available
for conguration:
CSM Support
This feature is for manufacturing debugging purposes.
Key Management
Vendor Keys
Provision Factory Default keys
Select Enabled to install the default Secure Boot keys set by the manufacturer. The options
are Disabled and Enabled.
*If the feature above is set to Enabled, the next four features are available for
conguration:
Install Factory Default Keys
Select Yes to install all factory keys to the default settings. The options are Yes and No.
Reset to Setup Mode
Select Yes to delete all Secure Boot key databases and force the system to Setup Mode.
The options are Yes and No.
Save all Secure Boot variables
EnrollEImage
This feature allows the image to run in Secure Boot mode.
Device Guard Ready
Remove 'UEFI CA' from DB
are Yes and No.
Restore DB defaults
Select Yes to restore all DBs to the default settings. The options are Yes and No.