This enables *support* for Secure Boot. It is not recommended to enable
Secure Boot. There is no firmware UI for managing the state or keys.
The system will default to disabled in Setup Mode:
$ mokutil --sb-state
SecureBoot disabled
Platform is in Setup Mode
This is sufficient to install Windows 11.
Signed-off-by: Tim Crawford <tcrawford@system76.com>
Set BOOTLOADER and PS2_KEYBOARD_ENABLE in the edk2 config. This will
allow us to drop the corresponding commits in edk2 when rebasing on the
next stable release.
Signed-off-by: Tim Crawford <tcrawford@system76.com>
Set options in edk2.config for each board.
PCIE_BASE is no longer an edk2 option. The value is expected to be in
AcpiBoardInfo HOB, generated from the bootloader's ACPI table.
Signed-off-by: Tim Crawford <tcrawford@system76.com>