UEFI secure PXE boot of t630 thin clients possible?

[AIM_DJP]

I've got a few t630 Windows 10IoT thin clients sitting on the shelf which don't currently boot from their OS, and I wanted to reimage them via PXE from HPDM.  I flashed the BIOS to the latest revision, which enabled the option of setting IPv4 as a UEFI boot option.  The BIOS update also enabled and set secure boot.

The thin client starts, and I can see in Wireshark where it contacts the PXE server.  The server appears to respond with the wrong option 60 value for a UEFI client, so the thin client doesn't acknowledge that PXE boot is available and times out.  If I disable secure boot and boot from legacy IPv4 PXE, the boot process starts correctly.  

I would like to leave secure boot enabled if at all possible.  Is there any configuration which will make that work?  I'm currently on HPDM 4.7 SP10, with plans to update to v5.0.  With that update correct this issue?  Is a Linux-based PXE boot process fundamentally incompatible with secure boot? 

[DM-AJ]

We will support PXE over UEFI with secure boot compatibility soon in HPDM 5.0 SP1. 

The 4.7 solution works with only legacy boot and secure boot disabled.  Also, the PXE solution in HPDM 5.0 cannot work with secure boot yet.

Please stay tuned and prepare for trying the new PXE with our next release.