Image Execution Policy
This item only appears when you set the Secure Boot Mode to [Custom]. This allows you to manage the Image Policy on Security Violation.
Aptio Setup Utility - Copyright (C) 2013 American Megatrends, Inc. Security
Interval FV | [Always Execute] | Image Execution | Policy |
Option ROM | [Deny Execute] | per device path | on |
Removable Media | [Deny Execute] | Security Violation. | |
Fixed Media | [Deny Execute] |
|
|
|
|
|
|
Internal FV [Always Execute]
Configuration options: [Always Execute]
Option ROM/Removable Media/Fixed Media [Deny Execute]
Configuration options: [Always Execute] [Always Deny] [Allow Execute] [Defer Execute] [Deny Execute] [Query User]
Key Management
This item only appears when you set the Secure Boot Mode to [Custom]. This allows you to modify Secure Boot variables and set Key Management page.
Aptio Setup Utility - Copyright (C) 2013 American Megatrends, Inc.
|
|
|
|
|
|
| Security |
|
|
|
|
|
|
|
Factory Default Key Provisioning [Disabled] | Install Factory default | |||
Install All Factory Default Keys |
|
|
| Secure Boot Keys when |
|
|
| System is in Setup Mode | |
Platform Key (PK) | NOT INSTALLED |
| ||
Set new PK |
|
|
|
|
Delete PK |
|
|
|
|
Key Exchange Key Database (KEK) | NOT INSTALLED |
| ||
Set new KEK |
|
|
|
|
Delete KEK |
|
|
|
|
Append Var to KEK |
|
|
|
|
Authorized Signature Database (DB) | NOT INSTALLED |
| ||
Set new DB |
|
|
|
|
Delete DB |
|
|
|
|
Append Var to DB |
|
|
|
|
Forbidden Signature Database (DBX) | NOT INSTALLED |
| ||
Set new DBX |
|
|
|
|
Delete DBX |
|
|
|
|
Append Var to DBX |
|
|
|
|
|
|
|
|
|
Factory Default Key Provisioning [Disabled]
Configuration options: [Disabled] [Enabled]
Install All Factory Default Keys
This item will ask you if you want to Install Factory Default secure variables. Select Yes if you want to load the default secure variables, otherwise select No.
Platform Key (PK)/Key Exchange Key Database (KEK)/Authorized Signature Database (DB)/ Forbidden Signature Database (DBX)
Configuration options: [Set New] [Delete] [Append]
Chapter 5: BIOS setup |