To enable Secure Boot in User Mode, the key step is to enroll the Platform Key (PK) in your BIOS settings. This action switches the system from Setup Mode (where Secure Boot is disabled) to User Mode, where Secure Boot can be enabled. Here are the general steps to enable Secure Boot in User Mode:
- Enter your computer's BIOS or UEFI firmware settings during startup (usually by pressing a key like F2, Delete, or Esc).
- Find the Secure Boot settings, often under the Security, Boot, or Authentication tab.
- Change the Secure Boot Mode from "Standard" or "Disabled" to "Custom."
- Select the option to enroll or install the default Platform Keys (PK). This step registers the keys required to switch the system to User Mode.
- After enrolling the keys, change the Secure Boot setting to Enabled.
- Save your changes and exit BIOS. Your system should now reboot with Secure Boot enabled in User Mode.
Note that some BIOS may require disabling Compatibility Support Module (CSM) or enabling UEFI boot mode for Secure Boot to work. Also, different motherboard manufacturers have slightly different menus and terminologies for this process. In summary, the critical action to enable Secure Boot in User Mode is enrolling the Platform Key (PK) through BIOS Firmware Settings, then enabling Secure Boot while in User Mode.
