Asus H110T-CM-A User Manual English - Page 54

The Key Exchange Keys KEK manages the Signature database db

Page 54 highlights

KEK Management The Key Exchange Keys (KEK) manages the Signature database (db) and Forbidden Signature database (dbx). Key Exchange Keys (KEK) refers to Microsoft® Secure Boot Key-Enrollment Key (KEK). Save To File This item allows you to save the KEK to a USB storage device. Set New Key This item allows you to load the downloaded KEK from a USB storage device. Append Key This item allows you to load the additional KEK from a storage device for an additional db and dbx loaded management. Delete key This item allows you to delete the KEK from your system. Configuration options: [Yes] [No] The KEK file must be formatted as a UEFI variable structure with time-based authenticated variable. DB Management The Authorized Signatures (db) lists the signers or images of UEFI applications, operating system loaders, and UEFI drivers that you can load on the single computer. Save To File This item allows you to save the db to a USB storage device. Set New Key This item allows you to load the downloaded db from a USB storage device. Append Key This item allows you to load the additional db from a storage device for an additional db and dbx loaded management. Delete key This item allows you to delete the db file from your system. Configuration options: [Yes] [No] The db file must be formatted as a UEFI variable structure with time-based authenticated variable. DBX Management The Forbidden Signature database (dbx) lists the forbidden images of db items that are no longer trusted and cannot be loaded. 3-22 H110T-CM-A

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63

3-22
H110T-CM-A
KEK Management
The Key Exchange Keys (KEK) manages the Signature database (db) and
Forbidden Signature database (dbx).
Key Exchange Keys (KEK) refers to Microsoft
®
Secure Boot Key-Enrollment
Key (KEK).
Save To File
This item allows you to save the
KEK
to a USB storage device.
Set New Key
This item allows you to load the downloaded
KEK
from a USB
storage device.
Append Key
This item allows you to load the additional
KEK
from a storage
device for an additional db and dbx loaded management.
Delete key
This item allows you to delete the KEK from your system.
Configuration options: [Yes] [No]
The KEK file must be formatted as a UEFI variable structure with time-based
authenticated variable.
DB Management
The Authorized Signatures (db) lists the signers or images of UEFI
applications, operating system loaders, and UEFI drivers that you can load
on the single computer.
Save To File
This item allows you to save the db to a USB storage device.
Set New Key
This item allows you to load the downloaded db from a USB
storage device.
Append Key
This item allows you to load the additional db from a storage
device for an additional db and dbx loaded management.
Delete key
This item allows you to delete the db file from your system.
Configuration options: [Yes] [No]
The db file must be formatted as a UEFI variable structure with time-based
authenticated variable.
DBX Management
The Forbidden Signature database (dbx) lists the forbidden images of db
items that are no longer trusted and cannot be loaded.