> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://helpdesk.ggcircuit.com/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# 🛡️ Configuring Secure Boot BIOS Settings for ggRock

To successfully boot Windows 10 or Windows 11 over PXE/iSCSI using ggRock, Secure Boot must be properly configured. This includes:

1. **Enabling Secure Boot**
2. **Switching to Custom Secure Boot Mode**
3. **Clearing Secure Boot Keys** *(this puts the system into “Setup Mode” and allows custom keys to be installed)*

|| Make sure to disable any “Restore/Reset Factory Keys on Boot” settings in your BIOS Secure Boot settings in order to persist the custom secure boot certificates.

---

🔧 Expand the section below for your platform:

## 🔽 Alienware

1. Power on and press `F2` to enter BIOS.
2. Go to **Boot** > **Secure Boot**.
3. Set **Secure Boot Mode** to **Custom**.
4. Select **Clear Secure Boot Keys**.

✅ Secure Boot keys have been cleared and the platform is now in **Setup Mode**, ready to receive custom Secure Boot certificates (PK, KEK, and db) from ggRock.

## 🔽 ASUSTeK (ASUS)

1. Tap `Del` or `F2` to enter UEFI BIOS.
2. Go to **Boot** > **Secure Boot**.
3. Set **OS Type** to **Other OS** (this unlocks Custom Mode) - NOTE: Some motherboards might require "Windows UEFI Mode" for certain game titles.
4. Set **Key Management** to **Custom**.
5. Select **Clear Secure Boot Keys**.

✅ Secure Boot keys have been cleared and the platform is now in **Setup Mode**, ready to receive custom Secure Boot certificates (PK, KEK, and db) from ggRock.

Note: Certain ASUS Proart motherboards may require secure boot settings to be in Windows UEFI mode.

## 🔽 Fujitsu

1. **Enter BIOS/UEFI Setup:**

* Press `F2` at power-on (some models use `Del`).
2. **Go to Secure Boot Settings:**

* Navigate to **Security** > **Secure Boot Configuration**.
3. **Enable Secure Boot:**

* Set **Secure Boot** to **Enabled**.
4. **Switch to Custom Mode:**

* Set Secure Boot to **Custom** or similar (depends on BIOS version).
5. **Clear Secure Boot Keys:**

* Choose **Clear Secure Boot Keys** or **Delete All Keys**.

✅ Secure Boot keys have been cleared and the platform is now in **Setup Mode**, ready to receive custom Secure Boot certificates (PK, KEK, and db) from ggRock.

## 🔽 Gigabyte

1. Press `Del` to enter BIOS.
2. Go to **BIOS** > **Secure Boot**.
3. Enable Secure Boot.
4. Set **Secure Boot Mode** to **Custom**.
5. Open **Key Management**, then choose **Clear Secure Boot Keys**.

✅ Secure Boot keys have been cleared and the platform is now in **Setup Mode**, ready to receive custom Secure Boot certificates (PK, KEK, and db) from ggRock.

## 🔽 HPE (Hewlett Packard Enterprise)

1. Press `F9` during boot to enter System Utilities.
2. Go to **System Configuration** > **BIOS/Platform Configuration (RBSU)** > **Secure Boot Options**.
3. Enable Secure Boot.
4. Set Secure Boot Configuration to **Custom Mode**.
5. Select **Clear Secure Boot Keys**.

✅ Secure Boot keys have been cleared and the platform is now in **Setup Mode**, ready to receive custom Secure Boot certificates (PK, KEK, and db) from ggRock.

## 🔽 Microsoft Surface (Surface Pro, Surface Laptop, etc.)

1. **Enter UEFI Firmware Settings:**

* Hold **Volume Up** and press the **Power** button.
* Keep holding Volume Up until the Surface UEFI screen appears.
2. **Navigate to Secure Boot Settings:**

* Go to the **Boot Configuration** or **Security** tab (depending on model).
* Set **Secure Boot** to **Enabled**.
3. **Switch to Custom Mode:**

* Change **Secure Boot Mode** to **Custom**.
4. **Clear Secure Boot Keys:**

* Select **Delete All Secure Boot Keys** or similar.

✅ Secure Boot keys have been cleared and the platform is now in **Setup Mode**, ready to receive custom Secure Boot certificates (PK, KEK, and db) from ggRock.

## 🔽 ASRock

1. Press `Del` at boot to access BIOS.
2. Navigate to **Security** > **Secure Boot**.
3. Change **Secure Boot Mode** to **Custom**.
4. Go to **Key Management** and select **Delete All Secure Boot Variables**.

✅ Secure Boot keys have been cleared and the platform is now in **Setup Mode**, ready to receive custom Secure Boot certificates (PK, KEK, and db) from ggRock.

## 🔽 Dell

1. Press `F2` during boot to enter BIOS Setup.
2. Navigate to **Boot Configuration** > **Secure Boot**.
3. Set **Secure Boot Mode** to **Custom**.
4. Select **Delete All Secure Boot Keys** or similar.

✅ Secure Boot keys have been cleared and the platform is now in **Setup Mode**, ready to receive custom Secure Boot certificates (PK, KEK, and db) from ggRock.

## 🔽 HP OMEN

1. Use `Esc` or `F10` during boot to enter BIOS.
2. Go to **Security** > **Secure Boot Configuration**.
3. Enable Secure Boot.
4. Select **Custom Secure Boot Keys**.
5. Choose **Clear All Keys**.

✅ Secure Boot keys have been cleared and the platform is now in **Setup Mode**, ready to receive custom Secure Boot certificates (PK, KEK, and db) from ggRock.

## 🔽 IBM (Lenovo ThinkSystem / legacy xSeries)

1. **Enter Setup Utility:**

* Press `F1` during system boot to access UEFI Setup.
2. **Go to Security Settings:**

* Navigate to **Security** > **Secure Boot**.
3. **Enable Secure Boot:**

* Set **Secure Boot** to **Enabled**.
4. **Switch to Custom Mode:**

* Change Secure Boot Mode to **Custom** (this may be under “Key Management”).
5. **Clear Secure Boot Keys:**

* Select **Delete All Secure Boot Keys** or choose to **Reset to Setup Mode**.

✅ Secure Boot keys have been cleared and the platform is now in **Setup Mode**, ready to receive custom Secure Boot certificates (PK, KEK, and db) from ggRock.

## 🔽 Lenovo

1. Press `F1` or `F2` to enter BIOS Setup.
2. Navigate to **Security** > **Secure Boot**.
3. Set Secure Boot Mode to **Custom**.
4. Choose **Clear Secure Boot Keys**.

✅ Secure Boot keys have been cleared and the platform is now in **Setup Mode**, ready to receive custom Secure Boot certificates (PK, KEK, and db) from ggRock.

## 🔽 Micro-Star (MSI)

1. Tap `Del` to enter BIOS Setup.
2. Go to **Settings** > **Advanced** > **Windows OS Configuration**.
3. Enable Secure Boot.
4. Set **Secure Boot Mode** to **Custom**.
5. Under **Key Management**, select **Clear Secure Boot Keys**.

✅ Secure Boot keys have been cleared and the platform is now in **Setup Mode**, ready to receive custom Secure Boot certificates (PK, KEK, and db) from ggRock.

## 🔽 Supermicro Desktops

1. **Enter BIOS Setup:**

* Press `Del` or `F2` at boot.
2. **Navigate to Secure Boot Settings:**

* Go to the **Boot** tab.
* Select **Secure Boot**.
3. **Enable Secure Boot:**

* Set **Secure Boot** to **Enabled**.
4. **Switch to Custom Mode:**

* Change **Secure Boot Mode** to **Custom**.
5. **Clear Secure Boot Keys:**

* Choose **Clear Secure Boot Keys** from the Key Management menu.

✅ Secure Boot keys have been cleared and the platform is now in **Setup Mode**, ready to receive custom Secure Boot certificates (PK, KEK, and db) from ggRock.

Your brand not listed here?   
  
Want to provide high-quality screenshots of your BIOS Secure Boot configuration to make this guide better?  
  
Reach out to us at[**support@ggcircuit.com**](mailto:support@ggcircuit.com)anytime!