Asus H61M-F - Manual (Page 65)

ASUS H61M-F 2-27
Boot from PCIe/PCI Expansion Devices [Legacy OpROM first]
Allows you to select the type of PCIe/PCI expansion devices that you want to launch.
Configuration options: [Legacy OpROM first] [UEFI driver first]
2.7.8 Security Boot
Allows you to configure the Windows ® Secure Boot settings and manage its keys to protect
the system from unauthorized access and malwares during POST.
OS Type [Other OS]
Allows you to select your installed operating system.
[Windows UEFI mode]
Executes the Microsoft ® Secure Boot check. Only
select this option when booting on Windows ® UEFI
mode or other Microsoft ® Secure Boot compliant OS.
[Other OS] Get the optimized function when booting on
Windows ® non-UEFI mode, Windows ® Vista/XP,
or other Microsoft ® Secure Boot non-compliant
OS. Only on Windows ® UEFI mode that Microsoft ®
Secure Boot can function properly.
The following item appears when OS Type is set to [Windows UEFI mode].
Secure Boot Mode [Standard]
Allows you to select how the Secure Boot prevents unauthorized firmware, operating
systems, or UEFI drivers from running during boot time.
[Standard]
Allows the system to automatically load the Secure Boot keys from the
BIOS database.
[Custom] Allows you to customize the Secure Boot settings and manually load its
keys from the BIOS database.
The following items appear when Secure Boot Mode is set to [Custom].
Key Management
This item appears only when you set Secure Boot Mode to [Custom]. It allows you to manage
the Secure Boot keys.
Manage the Secure Boot Keys (PK, KEK, db, dbx)
Install Default Secure Boot keys
Allows you to immediately load the default Security Boot keys, Platform key (PK), Key-
exchange Key (KEK), Signature database (db), and Revoked Signatures (dbx). The
Platform Key (PK) state will change from Unloaded mode to Loaded mode. The settings are
applied after reboot or at the next reboot.
Key-exchange Key (KEK) refers to Microsoft ® Secure Boot Key database (KEK).