8 security boot, Security boot -26 – Asus E2KM1I-DELUXE User Manual

Page 62

Advertising
background image

2-26

Chapter 2: Getting started

The following four items appear when you set Launch CSM to [Enabled].

Boot Devices Control [UEFI and Legacy OpROM]

Allows you to select the type of devices that you want to boot up. Configuration options:

[UEFI and Legacy OpROM] [Legacy OpROM only] [UEFI only]

Boot from Network Devices [Legacy OpROM first]

Allows you to select the type of network devices that you want to launch. Configuration

options: [Legacy OpROM first] [UEFI driver first] [Ignore]

Boot from Storage Devices [Legacy OpROM first]

Allows you to select the type of storage devices that you want to launch. Configuration

options: [Both, Legacy OpROM first] [Both, UEFI first] [Legacy OpROM first] [UEFI driver first]

[Ignore]

Boot from PCIe/PCI Expansion Devices [Legacy OpROM first]

Allows you to select the type of PCIe/PCI expansion devices that you want to launch.

Configuration options: [Legacy OpROM first] [UEFI driver first]

2.7.8

Security Boot

Allows you to configure the Windows

®

Secure Boot settings and manage its keys to protect

the system from unauthorized access and malwares during POST.

OS Type [Windows UEFI mode]

Allows you to select your installed operating system.
[Windows UEFI mode]

Executes the Microsoft

®

Secure Boot check. Only

select this option when booting on Windows

®

UEFI

mode or other Microsoft

®

Secure Boot compliant OS.

[Other OS]

Get the optimized function when booting on

Windows

®

non-UEFI mode, Windows

®

Vista/XP,

or other Microsoft

®

Secure Boot non-compliant

OS. Only on Windows

®

UEFI mode that Microsoft

®

Secure Boot can function properly.

The following items appear when OS Type is set to [Windows UEFI mode].

Key Management

It allows you to manage the Secure Boot keys.

Manage the Secure Boot Keys (PK, KEK, db, dbx)

Install Default Secure Boot keys

Allows you to immediately load the default Security Boot keys, Platform key (PK), Key-

exchange Key (KEK), Signature database (db), and Revoked Signatures (dbx). The

Platform Key (PK) state will change from Unloaded mode to Loaded mode. The settings are

applied after reboot or at the next reboot.

Key-exchange Key (KEK) refers to Microsoft

®

Secure Boot Key database (KEK).

Advertising