Secure Boot BIOS settings

[Prometheus12]

When I enter the BIOS settings, I go to Advanced and Secure Boot Configuration, and I have selected Legacy Boot Disabled and Secure Boot Enabled. Under Secure Boot Management, there are four options:  Import Custom Secure Boot keys - Clear Secure Boot keys - Reset Secure Boot keys to factory defaults - Enable MS UEFI CA key.

To have the new Secure Boot keys to be installed, do I need to have Enable MS UEFI CA key check-marked? I am not exactly sure what the settings should be.

[resistencia · Accepted solution]

Hi @Prometheus12 

The MS UEFI CA, This option must be selected if you want to receive UEFI updates from Microsoft . Otherwise, you will need to import the certificates manually. Debe seleccionar siempre el secure Boot, no usar Legacy.