Secure Boot Custom Policy
Use this menu to configure secure boot custom policy.
| Item | Operation | Description |
|---|---|---|
Secure Boot Custom Policy | ||
Enroll UEFI Image | Executive item. Enrolls the SHA256 hash of the selected UEFI image binary into the authorized signature database. | |
Secure Boot variable | Dynamic information. Displays the platform keys, key exchange keys, authorized signature database, and forbidden signature database. | |
Size | Dynamic information. Displays the number of bytes. | |
Keys | Dynamic information. Displays the number of certificates. | |
Key Source | Dynamic information. Displays the certificate sources. The sources can be Factory Default, No Keys, Mixed, or Customized. | |
PK | Executive item. Enrolls a PK or delete the existing key. | |
KEK | Executive item. Enrolls a KEK or delete the existing key. | |
DB | Executive item. Enrolls a DB or delete the existing key. | |
DBX | Executive item. Enrolls a DBX or delete the existing key. | |