{{tag>secure_boot uefi bios supermicro}}

====== Supermicro Secure Boot custom keys ======
To enroll secure boot custom keys enter the BIOS/UEFI, go to Security > Secure Boot and disable it.

You should aim for something like this, UEFI should be in setup mode with SB disabled.
{{wiki:screenshots:2025:08:setup-not-active.png?direct&400|}}

Go to Key Management and delete all Vendor variables and enroll your own. You can do it from the mounted ISO file where you have them stored. Press enter on each of the "Platform Key", "Key Exchange Keys" and "Authorized Signature" and select the corresponding file from your ISO.
{{wiki:screenshots:2025:08:delete-all-variables.png?direct&400|}}


After the custom keys have been enrolled.
{{wiki:screenshots:2025:08:custom-keys-enrolled.png?direct&400|}}


System should now be in User, Not active mode
{{wiki:screenshots:2025:08:setup-user-not-active.png?direct&400|}}

You can now enable SB again, F4 to save and exit and try booting from you custom ISO which is signed by the above enrolled keys.



====== Tested on ======
  * Supermicro X11SSL-nF

====== See also ======

====== References ======
  * https://www.supermicro.com/manuals/motherboard/C232/MNL-1782.pdf