Re: Secure Boot

ggior1 · ‎10-02-2018

my situation :

NUC kit 5i5ryH with latest BIOS version 0371

windows 10 pro 1803 fully and regularly updated and installed ith BIOS in UEFI mode only (no legacy)

secure boot enabled in BIOS with all keys "installed" (as you can see in attachment. i installed them in "custom mode" after clering of alla values and in "not installed" status...then i switched to "standard mode")

in W10 ,executing "system information" tool i see "BIOS mode" as "UEFI" and "secure boot state" to "on" (as you can see in attachment)

executing in powershell the command "Confirm-SecureBootUEFI" gives "true"

executing http://apps.insyde.com/sbutil.html Secure Boot Checkup Utility (from Insyde Software ) i get no warnings and all seems ok (as you can see in attachment)

but...

... with this last utility i feel something is wrong: the PK (platform key) under "secure boot database contents" is empty (inside BIOS i read the PK is "installed"), while under "optimal factory restore variables" is present with "do not trust" indication

even under "secure boot" tab, showing "factory default" box, i get a "PKDefault" as "do not trust"

I do not understand. where am i wrong? is my "secure boot" actually enabled and operating?

why the PK value is strange using this very specialized utility?

yes, i am a securityaholic and any advice is welcome

thanx

idata · ‎10-03-2018

Hello georg69,

Thank you for joining this Intel Community.

Intel Customer Service no longer responds to telephone, chat, or e-mail inquiries for Intel® NUC Kit NUC5i5RYH, but you may want to try our "Discontinued Products Community" to get recommendations from fellow community members. You may also find the "Discontinued Products Website" helpful to address your request.

/community/tech/discontinued-products Discontinued Products Community

https://www.intel.com/content/www/us/en/support/discontinued-products.html Discontinued Products Website

Keep in mind that other community members may assist since Intel will not provide any assistance on the Community.

It is also worth mentioning that you can verify additional information about this product's discontinuance status at http://ark.intel.com/ > Product Status > "Discontinued".

Wanner G.

Intel Customer Support Technician

Under Contract to Intel Corporation

ggior1 · ‎10-03-2018

thanks