Configure UEFI Secure Boot
- Access the BIOS Setup Utility menus.
-
On the Main Menu screen, select Security and press
Enter.
-
On the Security Settings screen, select Secure Boot and
press Enter.
-
On the Secure Boot screen, select Secure Boot and press
Enter. Do one of the following:
- Select Enabled to enable UEFI Secure Boot. Continue with the next step to manage policy variables.
- Select Disabled to disable UEFI Secure Boot. Continue with Step 8 to save changes and exit from the BIOS Setup Utility.
When enabled, Secure Boot allows you to manage Secure Boot policy variables.
-
To manage Secure Boot policy variables, select Key
Management and press Enter.
The Key Management screen provides options to provision factory default Secure Boot keys or to enroll an Extensible Firmware Interface (EFI) image.
-
If you want to provision factory default keys, select Provision
Factory Defaults and press Enter. Do one of the
following:
-
Select Enabled to allow the provisioning of
factory default Secure Boot keys when the system is in Setup Mode.
When enabled, you can select Install Factory Default
Keys to force the system to User Mode and install all
the factory default Secure Boot keys.
-
Select Disabled to disable the provisioning of
factory default Secure Boot keys. When disabled, you can select
Delete all Secure Boot Variables to remove
all Secure Boot keys from the system. Selecting this option also
resets the system to Setup Mode.
-
Select Enabled to allow the provisioning of
factory default Secure Boot keys when the system is in Setup Mode.
When enabled, you can select Install Factory Default
Keys to force the system to User Mode and install all
the factory default Secure Boot keys.
-
If you want to enroll an EFI image, select Enroll Efi
Image and press Enter.
-
On the Select a File System screen, Scroll through the list and
select the file system that contains the EFI file and press
Enter.
-
On the Select File screen, scroll through the list and select the
EFI file (or another available file) and press Enter.
- On the next Select File screen, scroll through the list and select the image file that you want to run in Secure Boot mode and press Enter.
-
To save all Secure Boot policy variables, select Save all
Secure Boot variables and press Enter.
-
On the Select a File System screen, select the file system where
you want to save the EFI file and press Enter.
The Secure Boot policy variables are saved to the root folder in the target file system.
-
On the Select a File System screen, Scroll through the list and
select the file system that contains the EFI file and press
Enter.
- Press the F10 key to save the changes and exit the BIOS Setup Utility.