Secure Boot; Enter Audit Mode; Enter Deployed Mode / Exit Deployed Mode; Key Management (Available When Secure Boot Mode Is Set To Custom) - Star Lake ROC300-TA45 User Manual

4.5.2

Secure Boot

Note: For detailed instructions on how to configure Security Boot settings, please refer to the Security Boot
Configuration User's Guide posted on the web page under the link:
http://www.supermicro.com/support/manuals/.
When you select this submenu and press the <Enter> key, the following items will display:
•System Mode
•Vendor Keys
•Secure Boot
Secure Boot
Select Enabled for Secure Boot flow control. This feature is available when the platform key (PK) is
pre-registered, the platform operates in the user mode, and CSM is disabled in the Setup utility. The
options are Disabled and Enabled.
Secure Boot Mode
This feature allows selection of the Secure Boot Mode between Standard and Custom. Selecting Custom
enables users to change the Image Execution Policy and manage Secure Boot Keys. The options are Custom
and Standard.
CSM Support
Select enabled to support the Compatibility Support Module (CSM), which provides compatibility support
for traditional legacy BIOS for system boot. The options are Disabled and Enabled.
Note: It is recommended to disable this feature. If this feature is set to Enabled, the Intel Trusted Execution
Technology (TXT) will be invalid.
*If the feature of Secure Boot Mode is set to Custom, the following features will become available for
configuration:

4.5.2.1 Enter Audit Mode

Press <Enter> to enter the audit mode workflow. It will result in erasing of Platform Key (PK) variables and
reset system to the Setup/Audit mode.

4.5.2.2 Enter Deployed Mode / Exit Deployed Mode

Press <Enter> button to switch between Deployment and User Mode.
4.5.3

Key Management (Available when Secure Boot Mode is set to Custom)

This submenu allows you to configure the following Key Management settings.
Vendor Keys
This feature displays the Vendor Keys. The default is Modified.
Provision Factory Default Keys
Select Enabled to install the default Secure Boot keys set by the manufacturer. The options are Disabled
and Enabled.
60