Chapter 6: BIOSSuperServer 5019P-WT/WTR User's Manual
9998
Secure Boot
This section displays the contents of the following secure boot features:
• System Mode
• Secure Boot
• Vendor Keys
Secure Boot
Use this item to enable secure boot. The options are Disabled and Enabled.
Secure Boot Mode
Standard and Custom.
CSM Support
Select Enabled to support the EFI Compatibility Support Module (CSM), which provides
compatibility support for traditional legacy BIOS for system boot. The options are Enabled
and Disabled.
Key Management
Provision Factory Default Keys
Select Enabled to install the default Secure-Boot keys set by the manufacturer. The op-
tions are Disabled and Enabled.
Enroll All Factory Default Keys
Select Yes to install all default secure keys set by the manufacturer. The options are
Yes and No.
Enroll EFI Image
This feature allows the image to run in Secure Boot Mode. Enroll SHA256 Hash Certicate
of the image into the Authorized Signature Database.
Save All Secure Boot Variables
This feature allows the user to decide if all secure boot variables should be saved.
Platform Key (PK)
Set New
Select Yes to load the new platform keys (PK) from the manufacturer's defaults. Select
Key Exchange Key
Set New
Select Yes to load the KEK from the manufacturer's defaults. Select No to load the KEK
Append
Select Yes to add the KEK from the manufacturer's defaults list to the existing KEK.
Authorized Signatures
Set New
Select Yes to load the database from the manufacturer's defaults. Select No to load the
Append
Select Yes to add the database from the manufacturer's defaults to the existing DB.
Forbidden Signatures
Set New
Select Yes to load the DBX from the manufacturer's defaults. Select No to load the DBX
Append
Select Yes to add the DBX from the manufacturer's defaults to the existing DBX. Select
To Next Page
Loading...
