/
🛡️ Configuring Secure Boot BIOS Settings for ggRock

🛡️ Configuring Secure Boot BIOS Settings for ggRock

To successfully boot Windows 10 or Windows 11 over PXE/iSCSI using ggRock, Secure Boot must be properly configured. This includes:

  1. Enabling Secure Boot

  2. Switching to Custom Secure Boot Mode

  3. Clearing Secure Boot Keys (this puts the system into “Setup Mode” and allows custom keys to be installed)

Make sure to disable any “Restore/Reset Factory Keys on Boot” settings in your BIOS Secure Boot settings in order to persist the custom secure boot certificates.

🔧 Expand the section below for your platform:

🔽 Alienware

  1. Power on and press F2 to enter BIOS.

  2. Go to Boot > Secure Boot.

  3. Set Secure Boot Mode to Custom.

  4. Select Clear Secure Boot Keys.

✅ Secure Boot keys have been cleared and the platform is now in Setup Mode, ready to receive custom Secure Boot certificates (PK, KEK, and db) from ggRock.

🔽 ASUSTeK (ASUS)

  1. Tap Del or F2 to enter UEFI BIOS.

  2. Go to Boot > Secure Boot.

  3. Set OS Type to Other OS (this unlocks Custom Mode).

  4. Set Key Management to Custom.

  5. Select Clear Secure Boot Keys.

✅ Secure Boot keys have been cleared and the platform is now in Setup Mode, ready to receive custom Secure Boot certificates (PK, KEK, and db) from ggRock.

Note: Certain ASUS Proart motherboards may require secure boot settings to be in Windows UEFI mode.

 

🔽 Fujitsu

  1. Enter BIOS/UEFI Setup:

    • Press F2 at power-on (some models use Del).

  2. Go to Secure Boot Settings:

    • Navigate to Security > Secure Boot Configuration.

  3. Enable Secure Boot:

    • Set Secure Boot to Enabled.

  4. Switch to Custom Mode:

    • Set Secure Boot to Custom or similar (depends on BIOS version).

  5. Clear Secure Boot Keys:

    • Choose Clear Secure Boot Keys or Delete All Keys.

✅ Secure Boot keys have been cleared and the platform is now in Setup Mode, ready to receive custom Secure Boot certificates (PK, KEK, and db) from ggRock.

🔽 Gigabyte

  1. Press Del to enter BIOS.

  2. Go to BIOS > Secure Boot.

  3. Enable Secure Boot.

  4. Set Secure Boot Mode to Custom.

  5. Open Key Management, then choose Clear Secure Boot Keys.

✅ Secure Boot keys have been cleared and the platform is now in Setup Mode, ready to receive custom Secure Boot certificates (PK, KEK, and db) from ggRock.

🔽 HPE (Hewlett Packard Enterprise)

  1. Press F9 during boot to enter System Utilities.

  2. Go to System Configuration > BIOS/Platform Configuration (RBSU) > Secure Boot Options.

  3. Enable Secure Boot.

  4. Set Secure Boot Configuration to Custom Mode.

  5. Select Clear Secure Boot Keys.

✅ Secure Boot keys have been cleared and the platform is now in Setup Mode, ready to receive custom Secure Boot certificates (PK, KEK, and db) from ggRock.

🔽 Microsoft Surface (Surface Pro, Surface Laptop, etc.)

  1. Enter UEFI Firmware Settings:

    • Hold Volume Up and press the Power button.

    • Keep holding Volume Up until the Surface UEFI screen appears.

  2. Navigate to Secure Boot Settings:

    • Go to the Boot Configuration or Security tab (depending on model).

    • Set Secure Boot to Enabled.

  3. Switch to Custom Mode:

    • Change Secure Boot Mode to Custom.

  4. Clear Secure Boot Keys:

    • Select Delete All Secure Boot Keys or similar.

✅ Secure Boot keys have been cleared and the platform is now in Setup Mode, ready to receive custom Secure Boot certificates (PK, KEK, and db) from ggRock.

🔽 ASRock

  1. Press Del at boot to access BIOS.

  2. Navigate to Security > Secure Boot.

  3. Change Secure Boot Mode to Custom.

  4. Go to Key Management and select Delete All Secure Boot Variables.

✅ Secure Boot keys have been cleared and the platform is now in Setup Mode, ready to receive custom Secure Boot certificates (PK, KEK, and db) from ggRock.

🔽 Dell

  1. Press F2 during boot to enter BIOS Setup.

  2. Navigate to Boot Configuration > Secure Boot.

  3. Set Secure Boot Mode to Custom.

  4. Select Delete All Secure Boot Keys or similar.

✅ Secure Boot keys have been cleared and the platform is now in Setup Mode, ready to receive custom Secure Boot certificates (PK, KEK, and db) from ggRock.

🔽 HP OMEN

  1. Use Esc or F10 during boot to enter BIOS.

  2. Go to Security > Secure Boot Configuration.

  3. Enable Secure Boot.

  4. Select Custom Secure Boot Keys.

  5. Choose Clear All Keys.

✅ Secure Boot keys have been cleared and the platform is now in Setup Mode, ready to receive custom Secure Boot certificates (PK, KEK, and db) from ggRock.

🔽 IBM (Lenovo ThinkSystem / legacy xSeries)

  1. Enter Setup Utility:

    • Press F1 during system boot to access UEFI Setup.

  2. Go to Security Settings:

    • Navigate to Security > Secure Boot.

  3. Enable Secure Boot:

    • Set Secure Boot to Enabled.

  4. Switch to Custom Mode:

    • Change Secure Boot Mode to Custom (this may be under “Key Management”).

  5. Clear Secure Boot Keys:

    • Select Delete All Secure Boot Keys or choose to Reset to Setup Mode.

✅ Secure Boot keys have been cleared and the platform is now in Setup Mode, ready to receive custom Secure Boot certificates (PK, KEK, and db) from ggRock.

🔽 Lenovo

  1. Press F1 or F2 to enter BIOS Setup.

  2. Navigate to Security > Secure Boot.

  3. Set Secure Boot Mode to Custom.

  4. Choose Clear Secure Boot Keys.

✅ Secure Boot keys have been cleared and the platform is now in Setup Mode, ready to receive custom Secure Boot certificates (PK, KEK, and db) from ggRock.

🔽 Micro-Star (MSI)

  1. Tap Del to enter BIOS Setup.

  2. Go to Settings > Advanced > Windows OS Configuration.

  3. Enable Secure Boot.

  4. Set Secure Boot Mode to Custom.

  5. Under Key Management, select Clear Secure Boot Keys.

✅ Secure Boot keys have been cleared and the platform is now in Setup Mode, ready to receive custom Secure Boot certificates (PK, KEK, and db) from ggRock.

🔽 Supermicro Desktops

  1. Enter BIOS Setup:

    • Press Del or F2 at boot.

  2. Navigate to Secure Boot Settings:

    • Go to the Boot tab.

    • Select Secure Boot.

  3. Enable Secure Boot:

    • Set Secure Boot to Enabled.

  4. Switch to Custom Mode:

    • Change Secure Boot Mode to Custom.

  5. Clear Secure Boot Keys:

    • Choose Clear Secure Boot Keys from the Key Management menu.

✅ Secure Boot keys have been cleared and the platform is now in Setup Mode, ready to receive custom Secure Boot certificates (PK, KEK, and db) from ggRock.

Your brand not listed here?

Want to provide high-quality screenshots of your BIOS Secure Boot configuration to make this guide better?

Reach out to us at support@ggcircuit.com anytime!