The following new edk2 options are set:
- BOOTSPLASH_IMAGE: Enable boot logo and add it to BGRT
- BOOT_MANAGER_ESCAPE: Use Esc instead of F2 to enter firmware setup
- SD_MMC_TIMEOUT: Reduce SD card timeout from 1s to 100ms
- SIO_BUS_ENABLE: Keep PS/2 keyboard working
- VARIABLE_SUPPORT: Set to emulated until coreboot SMMSTORE support is
implemented
Signed-off-by: Tim Crawford <tcrawford@system76.com>
This enables *support* for Secure Boot. It is not recommended to enable
Secure Boot. There is no firmware UI for managing the state or keys.
The system will default to disabled in Setup Mode:
$ mokutil --sb-state
SecureBoot disabled
Platform is in Setup Mode
This is sufficient to install Windows 11.
Signed-off-by: Tim Crawford <tcrawford@system76.com>