Table of Contents
Advertisement
Option
Description
Secure Boot Policy
When Secure Boot policy is set to Standard, the BIOS uses the system manufacturer's key and certificates to
authenticate pre-boot images. When Secure Boot policy is set to Custom, the BIOS uses the user-defined key and
certificates. Secure Boot policy is set to Standard by default.
Secure Boot Policy
Specifies the list of certificates and hashes that secure boot uses to authenticate images.
Summary
Secure Boot Custom Policy Settings screen details
Secure Boot Custom Policy Settings is displayed only when the Secure Boot Policy option is set to Custom.
To view the Secure Boot Custom Policy Settings screen, click System Setup Main Menu > System BIOS > System Security > Secure
Boot Custom Policy Settings.
The Secure Boot Custom Policy Settings screen details are explained as follows:
Option
Description
Platform Key
Imports, exports, deletes, or restores the platform key (PK).
Key Exchange Key
Enables you to import, export, delete, or restore entries in the Key Exchange Key (KEK) Database.
Database
Authorized
Imports, exports, deletes, or restores entries in the Authorized Signature Database (db).
Signature Database
Forbidden
Imports, exports, deletes, or restores entries in the Forbidden Signature Database (dbx).
Signature Database
Miscellaneous Settings details
The Miscellaneous Settings screen details are explained as follows:
Option
Description
System Time
Enables you to set the time on the system.
System Date
Enables you to set the date on the system.
Asset Tag
Specifies the asset tag and enables you to modify it for security and tracking purposes.
Keyboard NumLock Enables you to set whether the system boots with the NumLock enabled or disabled. This option is set to On by
default.
F1/F2 Prompt on
Enables or disables the F1/F2 prompt on error. This option is set to Enabled by default. The F1/F2 prompt also
Error
includes keyboard errors.
Load Legacy Video
Enables you to determine whether the system BIOS loads the legacy video (INT 10H) option ROM from the video
Option ROM
controller. Selecting Enabled in the operating system does not support UEFI video output standards. This field is
available only for UEFI boot mode. You cannot set the option to Enabled if UEFI Secure Boot mode is enabled.
In-System
Enables or disables In-System Characterization. This option is set to Disabled by default. The two other options
Characterization
are Enabled and Enabled - No Reboot.
When enabled, In-System Characterization (ISC) executes during POST upon detecting relevant changes in
system configuration to optimize system power and performance. ISC takes about 20 seconds to execute, and
NOTE:
This option does not apply to 84-key keyboards.
NOTE:
The default setting for In-System Characterization is subject to change in future BIOS releases.
Pre-operating system management applications
45
Advertisement
Table of Contents
Troubleshooting
