If you want to provision factory default keys, select Factory Key
Provision and press Enter. Do one of the following:
Select Enabled to allow the provisioning of
factory default Secure Boot keys when the system is in Setup Mode.
When enabled, you can select Restore Factory Keys
to force the system to User Mode and install all the factory default
Secure Boot keys.
Select Disabled to disable the provisioning of
factory default Secure Boot keys. When disabled, you can select
Delete all Secure Boot Variables to remove
all Secure Boot keys from the system. Selecting this option also
resets the system to Setup Mode.
If you want to enroll an EFI image, select Enroll Efi
Image and press Enter.
On the Select a File System screen, Scroll through the list and
select the file system that contains the EFI file and press
Enter.
On the Select File screen, scroll through the list and select the
EFI file (or another available file) and press Enter.
On the next Select File screen, scroll through the list and select
the image file that you want to run in Secure Boot mode and press
Enter.
To save all Secure Boot policy variables, select Save all
Secure Boot variables and press Enter.
On the Select a File System screen, select the file system where
you want to save the EFI file and press Enter.
The Secure Boot policy variables are saved to the root folder in
the target file system.
Press the F10 key to save the changes and exit the BIOS Setup
Utility.