Secure Boot will be configured with owner keys and a password will be set to the BIOS to prevent its deactivation.
- Turn on the server and enter the BIOS (usually with the
F2
key). - Configure Secure Boot in "Setup" mode, save and reboot.
- After logging in with
admin
, run:sudo ./scripts/secureboot.sh
. - If there were no errors, then run
reboot
to reboot and enter the BIOS again. - Exit "Setup" mode and enable Secure Boot.
- Set a password to the BIOS, save and reboot.
- After logging in with
admin
, run:sbctl status
. The message should say that it is installed and Secure Boot is enabled.