How to enable and disable Secure Boot in BIOS?

Purpose:

Enable or disable Secure Boot validation in BIOS.

Target Audience:

To whom already has an OS with Secure Boot signed keys and looking for how to import public keys in BIOS.

Secure Boot:

Secure Boot is a security standard developed by members of the PC industry to help ensure that a device boots using only software that is trusted by the Original Equipment Manufacturer (OEM). When the PC starts, the firmware checks the signature of each piece of boot software, including firmware drivers (Option ROMs), EFI applications, and the operating system. If the signatures are valid, the PC boots, and the firmware gives control to the operating system.

Secure Boot is designed to protect the boot process from attacks that seek to compromise it, ensuring that only trusted software is allowed to run during boot. It's an important feature for maintaining the security of a system, especially in environments where integrity and reliability are critical.

Steps:

1. Enter BIOS setup.

2. Find Secure Boot in Security page.

• Please contact your Advantech representative if you cannot find this setup.

3. Select "Secure Boot to Enabled" and "Secure Boot Mode to Custom" to enable BIOS Secure Boot.

4. Select "Secure Boot to Disabled" and "Secure Boot Mode to Standard" to disable BIOS Secure Boot.