Security
Key Management
Key Management firmware setup page decoded from AMI HII/IFR resources.
- Form ID
- 0x2938
- Records
- 11
- Parents
- Secure Boot
- Path
- Setup / Security / Secure Boot / Key Management
Record 136
Factory Key Provision
Firmware Value
Install factory default Secure Boot keys after the platform reset and while the System is in Setup mode
- Form
- Key Management
- Opcode
- OneOf
- Question ID
- 0x2939
- VarStore
- SecureBootSetup
- VarStore GUID
- 7B59104A-C00D-4158-87FF-F04D6396A915
- Offset
- 0x2
- Width
- 1 byte(s)
- Range
- 0 to 1 step 0
| Value | Label | Markers |
|---|---|---|
0 | Disabled | |
1 | Enabled | Standard defaultManufacturing default |
Default store records
| Store ID | Store label | Value | Option label |
|---|---|---|---|
0 | Standard | 0 | Disabled |
Record 137
Restore Factory Keys
Menu Link
Force System to User Mode.
Firmware help text
Force System to User Mode. Install factory default Secure Boot key databases
- Form
- Key Management
- Opcode
- Ref
- Question ID
- 0x293a
Record 138
Reset To Setup Mode
Menu Link
Delete all Secure Boot key databases from NVRAM
- Form
- Key Management
- Opcode
- Ref
- Question ID
- 0x293b
Visibility / conditions
- {"condition_id": 88, "type": "GrayOutIf", "offset": 325772, "expr": ["EqIdVal QuestionId: 0x12B4, Value: 0x0"]}
Record 139
Enroll Efi Image
Menu Link
Allow Efi image to run in Secure Boot mode.
Firmware help text
Allow Efi image to run in Secure Boot mode. Enroll SHA256 Hash certificate of a PE image into Authorized Signature Database (db)
- Form
- Key Management
- Opcode
- Ref
- Question ID
- 0x293c
Record 140
Export Secure Boot variables
Menu Link
Save NVRAM content of Secure Boot variable to a file
- Form
- Key Management
- Opcode
- Ref
- Question ID
- 0x293d
Visibility / conditions
- {"condition_id": 89, "type": "GrayOutIf", "offset": 325812, "expr": ["EqIdVal QuestionId: 0x12B4, Value: 0x0", "EqIdVal QuestionId: 0x12B3, Value: 0x0", "And", "EqIdVal QuestionId: 0x12B2, Value: 0x0", "And", "EqIdVal QuestionId: 0x12B1, Value: 0x0", "And", "EqIdVal QuestionId: 0x12B0, Value: 0x0", "And", "EqIdVal QuestionId: 0x12AF, Value: 0x0", "And"]}
Record 141
Menu Link
Enroll Factory Defaults or load certificates from a file: 1.Public Key Certificate: a)EFI_SIGNATURE_LIST b)EFI_CERT_X509 (DER) c)EFI_CERT_RSA2048 (bin) d)EFI_CERT_SHAXXX 2.Authenticated UEFI Variable 3.EFI PE/COFF Image...
Firmware help text
Enroll Factory Defaults or load certificates from a file: 1.Public Key Certificate: a)EFI_SIGNATURE_LIST b)EFI_CERT_X509 (DER) c)EFI_CERT_RSA2048 (bin) d)EFI_CERT_SHAXXX 2.Authenticated UEFI Variable 3.EFI PE/COFF Image(SHA256) Key Source: Factory,Modified,Mixed
- Form
- Key Management
- Opcode
- Ref
- Question ID
- 0x293e
Record 142
Menu Link
Enroll Factory Defaults or load certificates from a file: 1.Public Key Certificate: a)EFI_SIGNATURE_LIST b)EFI_CERT_X509 (DER) c)EFI_CERT_RSA2048 (bin) d)EFI_CERT_SHAXXX 2.Authenticated UEFI Variable 3.EFI PE/COFF Image...
Firmware help text
Enroll Factory Defaults or load certificates from a file: 1.Public Key Certificate: a)EFI_SIGNATURE_LIST b)EFI_CERT_X509 (DER) c)EFI_CERT_RSA2048 (bin) d)EFI_CERT_SHAXXX 2.Authenticated UEFI Variable 3.EFI PE/COFF Image(SHA256) Key Source: Factory,Modified,Mixed
- Form
- Key Management
- Opcode
- Ref
- Question ID
- 0x293f
Record 143
Menu Link
Enroll Factory Defaults or load certificates from a file: 1.Public Key Certificate: a)EFI_SIGNATURE_LIST b)EFI_CERT_X509 (DER) c)EFI_CERT_RSA2048 (bin) d)EFI_CERT_SHAXXX 2.Authenticated UEFI Variable 3.EFI PE/COFF Image...
Firmware help text
Enroll Factory Defaults or load certificates from a file: 1.Public Key Certificate: a)EFI_SIGNATURE_LIST b)EFI_CERT_X509 (DER) c)EFI_CERT_RSA2048 (bin) d)EFI_CERT_SHAXXX 2.Authenticated UEFI Variable 3.EFI PE/COFF Image(SHA256) Key Source: Factory,Modified,Mixed
- Form
- Key Management
- Opcode
- Ref
- Question ID
- 0x2940
Record 144
Menu Link
Enroll Factory Defaults or load certificates from a file: 1.Public Key Certificate: a)EFI_SIGNATURE_LIST b)EFI_CERT_X509 (DER) c)EFI_CERT_RSA2048 (bin) d)EFI_CERT_SHAXXX 2.Authenticated UEFI Variable 3.EFI PE/COFF Image...
Firmware help text
Enroll Factory Defaults or load certificates from a file: 1.Public Key Certificate: a)EFI_SIGNATURE_LIST b)EFI_CERT_X509 (DER) c)EFI_CERT_RSA2048 (bin) d)EFI_CERT_SHAXXX 2.Authenticated UEFI Variable 3.EFI PE/COFF Image(SHA256) Key Source: Factory,Modified,Mixed
- Form
- Key Management
- Opcode
- Ref
- Question ID
- 0x2941
Record 145
Menu Link
Enroll Factory Defaults or load certificates from a file: 1.Public Key Certificate: a)EFI_SIGNATURE_LIST b)EFI_CERT_X509 (DER) c)EFI_CERT_RSA2048 (bin) d)EFI_CERT_SHAXXX 2.Authenticated UEFI Variable 3.EFI PE/COFF Image...
Firmware help text
Enroll Factory Defaults or load certificates from a file: 1.Public Key Certificate: a)EFI_SIGNATURE_LIST b)EFI_CERT_X509 (DER) c)EFI_CERT_RSA2048 (bin) d)EFI_CERT_SHAXXX 2.Authenticated UEFI Variable 3.EFI PE/COFF Image(SHA256) Key Source: Factory,Modified,Mixed
- Form
- Key Management
- Opcode
- Ref
- Question ID
- 0x2942
Record 146
Menu Link
Enroll Factory Defaults or load certificates from a file: 1.Public Key Certificate: a)EFI_SIGNATURE_LIST b)EFI_CERT_X509 (DER) c)EFI_CERT_RSA2048 (bin) d)EFI_CERT_SHAXXX 2.Authenticated UEFI Variable 3.EFI PE/COFF Image...
Firmware help text
Enroll Factory Defaults or load certificates from a file: 1.Public Key Certificate: a)EFI_SIGNATURE_LIST b)EFI_CERT_X509 (DER) c)EFI_CERT_RSA2048 (bin) d)EFI_CERT_SHAXXX 2.Authenticated UEFI Variable 3.EFI PE/COFF Image(SHA256) Key Source: Factory,Modified,Mixed
- Form
- Key Management
- Opcode
- Ref
- Question ID
- 0x2943