beautypg.com

9 security boot, Security boot -31 – Asus H61-PLUS User Manual

Page 75

background image

ASUS H61-PLUS

2-31

The following four items appear when you set Launch CSM to [Enabled].

Boot Devices Control [UEFI and Legacy OpROM]

Allows you to select the type of devices that you want to boot up. Configuration options:

[UEFI and Legacy OpROM] [Legacy OpROM only] [UEFI only]

Boot from Network Devices [Legacy OpROM first]

Allows you to select the type of network devices that you want to launch. Configuration

options: [Legacy OpROM first] [UEFI driver first] [Ignore]

Boot from Storage Devices [Legacy OpROM first]

Allows you to select the type of storage devices that you want to launch. Configuration

options: [Both, Legacy OpROM first] [Both, UEFI first] [Legacy OpROM first] [UEFI driver first]

[Ignore]

Boot from PCIe/PCI Expansion Devices [Legacy OpROM first]

Allows you to select the type of PCIe/PCI expansion devices that you want to launch.

Configuration options: [Legacy OpROM first] [UEFI driver first]

2.7.9

Security Boot

Allows you to configure the Windows

®

Secure Boot settings and manage its keys to protect

the system from unauthorized access and malwares during POST.

OS Type [Windows UEFI mode]

Allows you to select your installed operating system.
[Windows UEFI mode]

Executes the Microsoft

®

Secure Boot check. Only

select this option when booting on Windows

®

UEFI

mode or other Microsoft

®

Secure Boot compliant OS.

[Other OS]

Get the optimized function when booting on

Windows

®

non-UEFI mode, Windows

®

Vista/XP,

or other Microsoft

®

Secure Boot non-compliant

OS. Only on Windows

®

UEFI mode that Microsoft

®

Secure Boot can function properly.

The following item appears when OS Type is set to [Windows UEFI mode].

Key Management

This item appears only when you set Secure Boot Mode to [Custom]. It allows you to manage

the Secure Boot keys.

Manage the Secure Boot Keys (PK, KEK, db, dbx)

Install Default Secure Boot keys

Allows you to immediately load the default Security Boot keys, Platform key (PK), Key-

exchange Key (KEK), Signature database (db), and Revoked Signatures (dbx). The

Platform Key (PK) state will change from Unloaded mode to Loaded mode. The settings are

applied after reboot or at the next reboot.