So far, as shown in the bios, I'm using secure boot with Windows 8. However, in the keys management section of the bios I see that PK, KEK, DB and DBX are "NOT INSTALLED". There are other options like:
- - Default Key Provisioning [disabled]
- - Install default Secure Boot Keys
I haven't found documentation about them so I don't feel like modifying in order not to break my setup.
I'd like to install my own keys
without deleting Microsoft keys in order to boot my own signed boot loader (for GNU/Linux).
- Is it possible to add new keys without deleting the MS ones?
- Where can I manage the Microsoft keys?
- What do these options mean?
Thanks in advance