Asus X99-E-10G WS X99-E-10G WS User Guide for English. - Page 132

Install Default Secure Boot keys, OS Type [Windows UEFI mode]

Get Asus X99-E-10G WS PDF manuals and user guides View all Asus X99-E-10G WS manuals
Add to My Manuals
Save this manual to your list of manuals

Page 132 highlights

OS Type [Windows UEFI mode] [Windows UEFI Mode] Execute the Microsoft secure boot check. Only check this option when booting on Windows UEFI mode or other Microsoft secure boot compliant operating systems. [Other OS] Select this option to get the optimized functions when booting on Windows non-UEFI mode and Microsoft secure boot noncompliant operating systems. The following item appears only when you set the OS Type to [Other OS]. Enhanced Mode [Disabled] Configuration options: [Disabled] [Enabled] The Microsoft secure boot can only function properly on Windows UEFI mode. Key Management Install Default Secure Boot keys This item allows you to load the default Security Boot keys, Platform key (PK), Key-exchange Key (KEK), Signature database (db), and Revoked Signatures (dbx). When the default Secure boot keys are loaded, the PK state will change from Unloaded mode to loaded mode. Save changes and reset the system for the change to take effect. Clear Secure Boot keys This item allows you to delete all the previously applied secure boot keys, including the PK (Platform Key), KEK (Key-Exchange Key), DB (signature database), and DBX (revoked signature database). All the secure boot keys states will change from loaded to unloaded. Save changes and reset the system for the change to take effect. Save Secure Boot Keys This item allows you to save all the secure boot keys to a USB storage device. PK Management Delete PK This item allows you to delete the PK (Platform Key). Once the PK is deleted, the secure boot function will be disabled. Load Default PK [Yes] Load the default PK. [No] Load the PK from a USB storage device. Delete KEK This item allows you to delete the KEK (Key-Exchange Key). Once the KEK is deleted, the DB (signature database) and the DBX (revoked signature database) will not be updateable in the operating system. Load Default KEK [Yes] Load the default KEK. [No] Load the KEK from a USB storage device. Append Default KEK [Yes] Append the default KEK. [No] Append the additional KEK from a USB storage device. Chapter 3 3-62 Chapter 3: BIOS Setup

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
3-62
Chapter 3: BIOS Setup
Chapter 3
OS Type [Windows UEFI mode]
[Windows UEFI Mode]
Execute the Microsoft secure boot check. Only check this
option when booting on Windows UEFI mode or other
Microsoft secure boot compliant operating systems.
[Other OS]
Select this option to get the optimized functions when booting
on Windows non-UEFI mode and Microsoft secure boot
noncompliant operating systems.
The following item appears only when you set the OS Type to
[Other OS]
.
Enhanced Mode [Disabled]
Configuration options: [Disabled] [Enabled]
The Microsoft secure boot can only function properly on Windows UEFI mode.
Key Management
Install Default Secure Boot keys
This item allows you to load the default Security Boot keys, Platform key
(PK), Key-exchange Key (KEK), Signature database (db), and Revoked
Signatures (dbx). When the default Secure boot keys are loaded, the PK
state will change from Unloaded mode to loaded mode. Save changes and
reset the system for the change to take effect.
Clear Secure Boot keys
This item allows you to delete all the previously applied secure boot keys,
including the PK (Platform Key), KEK (Key-Exchange Key), DB (signature
database), and DBX (revoked signature database). All the secure boot
keys states will change from loaded to unloaded. Save changes and reset
the system for the change to take effect.
Save Secure Boot Keys
This item allows you to save all the secure boot keys to a USB storage
device.
PK Management
Delete PK
This item allows you to delete the PK (Platform Key). Once the PK is
deleted, the secure boot function will be disabled.
Load Default PK
[Yes]
Load the default PK.
[No]
Load the PK from a USB storage device.
Delete KEK
This item allows you to delete the KEK (Key-Exchange Key). Once the KEK
is deleted, the DB (signature database) and the DBX (revoked signature
database) will not be updateable in the operating system.
Load Default KEK
[Yes]
Load the default KEK.
[No]
Load the KEK from a USB storage device.
Append Default KEK
[Yes]
Append the default KEK.
[No]
Append the additional KEK from a USB storage device.