Security
Secure Boot
Secure Boot firmware setup page decoded from AMI HII/IFR resources.
- Form ID
- 0x292f
- Records
- 5
- Parents
- Security
- Children
- Key Management
- Path
- Setup / Security / Secure Boot
Record 131
Secure Boot
Firmware Value
Secure Boot feature is Active if Secure Boot is Enabled, Platform Key(PK) is enrolled and the System is in User mode.
Firmware help text
Secure Boot feature is Active if Secure Boot is Enabled, Platform Key(PK) is enrolled and the System is in User mode. The mode change requires platform reset
- Form
- Secure Boot
- Opcode
- OneOf
- Question ID
- 0x2930
- VarStore
- SecureBootSetup
- VarStore GUID
- 7B59104A-C00D-4158-87FF-F04D6396A915
- Offset
- 0x0
- Width
- 1 byte(s)
- Range
- 0 to 1 step 0
| Value | Label | Markers |
|---|---|---|
0 | Disabled | |
1 | Enabled | Standard defaultManufacturing default |
Default store records
| Store ID | Store label | Value | Option label |
|---|---|---|---|
0 | Standard | 1 | Enabled |
Visibility / conditions
- {"condition_id": 81, "type": "GrayOutIf", "offset": 325432, "expr": ["EqIdVal QuestionId: 0x1186, Value: 0x1"]}
Record 132
Secure Boot Mode
Firmware Value
Secure Boot mode options: Standard or Custom.
Firmware help text
Secure Boot mode options: Standard or Custom. In Custom mode, Secure Boot Policy variables can be configured by a physically present user without full authentication
- Form
- Secure Boot
- Opcode
- OneOf
- Question ID
- 0x2931
- VarStore
- SecureBootSetup
- VarStore GUID
- 7B59104A-C00D-4158-87FF-F04D6396A915
- Offset
- 0x1
- Width
- 1 byte(s)
- Range
- 0 to 1 step 0
| Value | Label | Markers |
|---|---|---|
0 | Standard | Standard defaultManufacturing default |
1 | Custom |
Default store records
| Store ID | Store label | Value | Option label |
|---|---|---|---|
0 | Standard | 0 | Standard |
Visibility / conditions
- {"condition_id": 81, "type": "GrayOutIf", "offset": 325432, "expr": ["EqIdVal QuestionId: 0x1186, Value: 0x1"]}
Record 133
Restore Factory Keys
Menu Link
Force System to User Mode.
Firmware help text
Force System to User Mode. Install factory default Secure Boot key databases
- Form
- Secure Boot
- Opcode
- Ref
- Question ID
- 0x2932
Visibility / conditions
- {"condition_id": 84, "type": "GrayOutIf", "offset": 325573, "expr": ["EqIdVal QuestionId: 0x1186, Value: 0x1", "EqIdVal QuestionId: 0x2931, Value: 0x0", "Or"]}
Record 134
Reset To Setup Mode
Menu Link
Delete all Secure Boot key databases from NVRAM
- Form
- Secure Boot
- Opcode
- Ref
- Question ID
- 0x2933
Visibility / conditions
- {"condition_id": 84, "type": "GrayOutIf", "offset": 325573, "expr": ["EqIdVal QuestionId: 0x1186, Value: 0x1", "EqIdVal QuestionId: 0x2931, Value: 0x0", "Or"]}
- {"condition_id": 85, "type": "GrayOutIf", "offset": 325606, "expr": ["EqIdVal QuestionId: 0x12B4, Value: 0x0"]}
Record 135
Key Management
Menu Link
Enables expert users to modify Secure Boot Policy variables without variable authentication
- Form
- Secure Boot
- Opcode
- Ref
- Question ID
- 0x2937
Visibility / conditions
- {"condition_id": 84, "type": "GrayOutIf", "offset": 325573, "expr": ["EqIdVal QuestionId: 0x1186, Value: 0x1", "EqIdVal QuestionId: 0x2931, Value: 0x0", "Or"]}