Syntax
bh_kek_iv = <iv file path>Description
This attribute specifies the IV that is used to encrypt the boot header black key. So 'bh_kek_iv' is valid with 'keysrc=bh_blk_key'.
Example
See AES Encryption with Multiple Key Sources for examples.