Installing or reinstalling default Secure Boot keys
When installing default keys, all secure boot data is overwritten with a default set for supported operating systems.
Prerequisites
A system must be in Setup mode (no keys installed) for the
Install Default Keys option to be available.
If a system has Secure Boot keys installed, delete the PK (platform key) to put the system in Setup mode.
Procedure
1. Interrupt the boot process and access UEFI.
Press
F2 to access the UEFI Boot Manager.
2. Access the Secure Boot Configuration menu.
At Boot Manager select the
Device Manager menu, then select the Secure Boot Configuration menu.
3. Select the Install Default Keys option.
This option also changes the system to User Mode and enables Secure Boot.
4. Reset the system to apply the changes.
You must reset the system before you can load an OS or access the UEFI Shell.
More information
Secure Boot Configuration menu
Default secure boot keys
Secure Boot Configuration menu
You access the
Secure Boot Configuration menu from UEFI. At Boot Manager select the Device Manager menu, then
select
Secure Boot Configuration.
This menu lists current boot settings and manages changes to Secure Boot options.
Figure 1: UEFI Secure Boot Configuration menu
Secure Boot
52
