Op tions Summary
R emove 'UEFI CA' from DB
Device Guard ready system must not list 'Microsoft UEFI CA' Certificate in Authorized
Signature database (db)
R estore DB defaults
Restore DB variable to factory defaults
P latform Key(PK)
Key Exchange Keys
A ut horized Signatures
F o rbidden Signatures
A uthorized TimeStamps
Os Recovery Signatures
Enroll Factory Defaults or load certificates from a file:
1. Public Key Certificate:
a) EFI_SIGNATURE_LIST
b) EFI_CERT_X509 (DER)
c) EFI_CERT_RSA2048 (bin)
d) EFI_CERT_SHAXXX
2. Authenticated UEFI Variable
3. EFI PE/COFF Image (SHA256)
Key Source: Factory, External, Mixed
Chapter 3 – AMI BIOS Setup
Details
Export
Update
Delete
Details
Export
Update
Append
Delete
Details
Export
Update
Append
Delete
Details
Export
Update
Append
Delete
Update
Append
Update
Append
78