Asus Z87M-PLUS Specifications download pdf (Page 102)

3-44

Chapter 3: BIOS setup

Chapter 3

KEK Management

The KEK (Key-exchange Key or Key Enrollment Key) manages the Signature database

(db) and Revoked Signature database (dbx).

Key-exchange Key (KEK) refers to Microsoft

Secure Boot Key-Enrollment Key (KEK).

Delete the KEK

Allows you to delete the KEK from your system. Once the KEK is deleted,

the db and dbx cannot be updated under operating system. Conguration

options: [Yes] [No]

Load KEK from File

Allows you to load the downloaded KEK from a USB storage device.

[Yes] Load the default KEK.

[Enabled] Load from a USB storage device.

Append KEK from File

Allows you to load the additional KEK from a storage device for an

additional db and dbx loaded management.

[Yes] Load the default KEK.

[Enabled] Load from a USB storage device.

The KEK le must be formatted as a UEFI variable structure with time-based authenticated

variable.

DB Management

The db (Authorized Signature database) lists the signers or images of UEFI

applications, operating system loaders, and UEFI drivers that you can load on the

single computer.

Delete the db

Allows you to delete the db le from your system. Deleting the db le may

cause boot failure. Conguration options: [Yes] [No]

Load db from File

Allows you to load the downloaded db from a USB storage device.

[Yes] Load the default db.

[Enabled] Load from a USB storage device.

Append db from File

Allows you to load the additional db from a storage device so that more

custom signed UEFI executable les can be loaded. UEFI executable les

include UEFI boot loaders, drivers and applications.

[Yes] Load the default db.

[Enabled] Load from a USB storage device.

The db le must be formatted as a UEFI variable structure with time-based authenticated

variable.

1 2 ... 97 98 99 100 101 102 103 104 105 106 107 ... 163 164

No comments

Asus Z87M-PLUS Specifications Page 102