Справочник Пользователя для ASUS H61M-PLUS

ASUS H61M Series

2-31

This item appears only when you set Secure Boot Mode to [Custom]. It allows you to manage 

the Secure Boot keys.

Allows you to immediately load the default Security Boot keys, Platform key (PK), Key-

exchange Key (KEK), Signature database (db), and Revoked Signatures (dbx). The 

Platform Key (PK) state will change from Unloaded mode to Loaded mode. The settings are 

applied after reboot or at the next reboot.

Key-exchange Key (KEK) refers to Microsoft

®

 Secure Boot Key database (KEK).

This item appears only when you load the default Secure Boot keys. This item allows you to 

clear all default Secure Boot keys.

PK Management
The Platform Key (PK) locks and secures the firmware from any non-permissible 

changes. The system verifies the PK before your system enters the OS. 

Allows you to load the downloaded PK from a USB storage device.

Allows you to store the PK to a USB storage device.

Allows you to delete the PK from your system. Once the PK is deleted, all the system’s 

Secure Boot keys will not be active. Configuration options: [Yes] [No]

The PK file must be formatted as a UEFI variable structure with time-based authenticated 

variable.

KEK Management
The KEK (Key-exchange Key or Key Enrollment Key) manages the Signature database 

(db) and Revoked Signature database (dbx). 

Key-exchange Key (KEK) refers to Microsoft

®

 Secure Boot Key-Enrollment Key (KEK).

Allows you to load the downloaded KEK from a USB storage device.

Allows you to store the KEK to a USB storage device.

Allows you to delete the KEK from your system. Configuration options: [Yes] [No]

Allows you to load the additional KEK from a storage device for an additional db and dbx 

loaded management.

The KEK file must be formatted as a UEFI variable structure with time-based authenticated 

variable.