Table of Contents
Advertisement
3.6.1.1
Key Management
Options Summary
Provision Factory
Defaults
Install factory default Secure Boot keys after the platform reset and while the System is
in Setup mode.
Restore Factory Keys
Reset to Setup Mode
Export Secure Boot
Variables
Enroll EFI Image
Remove 'UEFI CA' from
DB
Restore DB defaults
Save all Secure Boot
Variables.
Chapter 3 – AMI BIOS Setup
Disabled
Enabled
Force system to user mode. Install factory default Secure
Boot key databases.
Delete all Secure Boot key databases from NVRAM.
Copy NVRAM content of Secure Boot variables to files in a
root folder on a file system device
Allow the image to run in Secure Boot mode. Enroll SHA256
hash of a PE image into Authorized Signature Database
(db).
Device Guard ready system must not list 'Microsoft UEFI CA'
Certificate in Authorized Signature database (db)
Restore DB variable to factory defaults.
Save NVRAM content of Secure Boot policy variables to the
files (EFI_SIGNATURE_LIST data format) in root folder on a
target file system device.
Optimal Default, Failsafe Default
65
Advertisement
Table of Contents
