-
Access the BIOS Setup Utility menus.
See Access BIOS Setup Utility Menus.
-
On the BIOS Setup Utility Main Menu screen, select
Security, and press Enter.
-
On the Security Settings screen, select Secure Boot,
and press Enter.
-
On the Secure Boot screen, select
Attempt
Secure Boot and press Enter. Do one of the
following:
-
Select Enabled to enable UEFI Secure Boot.
Continue with the next step to manage policy variables.
-
Select Disabled to disable UEFI Secure Boot.
Continue with Step 8 to save
changes and exit from the BIOS Setup Utility.
When enabled, Secure Boot allows you to manage Secure Boot policy
variables.
-
To manage Secure Boot policy variables, select Key
Management and press Enter.
The Key Management screen provides options to provision factory default
Secure Boot keys or to enroll an Extensible Firmware Interface (EFI)
image.
-
If you want to provision factory default keys, on the Key Management
screen, select
Factory
Key Provision, and press Enter. Do one of
the following:
-
Select Enabled to allow the provisioning of
factory default Secure Boot keys when the system is in Setup Mode.
When enabled, you can select
Restore
Factory Keys to force the system to
User Mode and install all the factory default Secure Boot
keys.
-
Select Disabled to disable the provisioning of
factory default Secure Boot keys. When disabled, you can select
Delete all Secure Boot Variables to remove
all Secure Boot keys from the system. Selecting this option also
resets the system to Setup Mode.
-
If you want to enroll an EFI image, on the Key Management screen, select
Enroll Efi Image, and press Enter.
-
In the Select a File System dialog box, scroll through the list,
select the file system that contains the EFI file, and press
Enter.
-
In the Select File dialog box, scroll through the list, select the
EFI file (or another available file), and press Enter.
-
In the second Select File dialog box, scroll through the list,
select the image file that you want to run in Secure Boot mode, and
press Enter.
-
To save all Secure Boot policy variables, select Save all
Secure Boot variables, and press Enter.
-
In the Select a File System dialog box, select the file system
where you want to save the EFI file, and press Enter.
The Secure Boot policy variables are saved to the root folder in
the target file system.
-
Press the F10 key to save the changes and exit the BIOS Setup
Utility.