Summary
Use Syscfg utility
Description
I'd like to clear the installed UEFI secure boot keys, which requires entering Setup Mode.
Under Boot Maintenance Manager, under secure boot, all I can do is enable or disable secure boot. I'm using the KeyTool.efi (part of efitools) and I can verify that the board is in User Mode, which doesn't allow me to clear the PK.
Is there a way to do this from the BIOS? (maybe a different BIOS version?) Can I do this somehow by modifying SPI flash directly? I have access to the board and tools to read/write SPI flash.
Resolution
- Intel does not recommend end users to enter set up mode directly as it is highly sensitive
- Use Syscfg utility.