Table of Contents
Advertisement
Options Summary
Device Guard ready system must not list 'Microsoft UEFI CA' Certificate in Authorized
Signature database (db).
Restore DB defaults
Restore DB variable to factory defaults.
Platform Key (PK)
Key Exchange Keys
Authorized Signatures
Forbidden Signatures
Authorized TimeStamps
OsRecovery Signatures
Enroll Factory Defaults or load certificates from a file:
1.Public Key Certificate:
a) EFI_SIGNATURE_LIST
b) EFI_CERT_X509 (DER)
c) EFI_CERT_RSA2048 (bin)
d) EFI_CERT_SHAXXX
2. Authenticated UEFI Variable
3. EFI PE/COFF Image (SHA256)
Key Source: Factory, External, Mixed
Chapter 3 – AMI BIOS Setup
Update
Update
Append
Update
Append
Update
Append
Update
Append
Update
Append
72
Advertisement
Table of Contents
