1. System BIOS
Express5800/R120g-1M, R120g-2M Maintenance Guide
90
Chapter 2 Useful Features
(a)
Key Management submenu
Option Parameter
Description
Provision Factory Default
keys
Disabled
[Enabled]
Enable/Disable the function to automatically
register the default key if you do not have Platform
Key (PK).
Delete All Secure Boot
Variables
－
Set “System Mode” to [Setup]. Disable Secure
Boot. All keys and signature databases (PK, KEK,
DB, DBX and DBT) will be deleted. You can
execute this section only when you set “Provision
Factory Default keys” to [Disabled].
Enroll All Factory Default
Keys
－
Set “System Mode” to [User]. Register the default
key and signature databases (PK, KEK, DB, DBX
and DBT). You can execute this section only when
you set “Provision Factory Default keys” to
[Enabled].
Save All Secure Boot
Variables
－
Save all keys and signature databases (PK, KEK, DB,
DBX and DBT) in an external media. You can execute
this section only when you have registered PK, KEK, db,
dbx and dbt keys.
Secure Boot variable | Size|
Key#| Key source
(Display only)
Display the status of keys and signature databases (PK,
KEK, DB, DBX and DBT).
Platform Key(PK)
－
Display the status of Platform Key (PK). Register/Delete
PK.
Key Exchange Keys
－
Display the status of Key Exchange Keys (KEK).
Register/Delete KEK .
Authorized Signatures
－
Display the status of Authorized Signatures (DB).
Register/Delete DB .
Forbidden Signatures
－
Display the status of Forbidden Signatures (DBX).
。
Register/Delete DBX .
Authorized Timestamps
－
Display the status of Authorized Timestamps (DBT).
Register/Delete DBT .
