Hi,

I want to enable secure boot in edk2. I am using edk2-2017 with coreboot for Intel architecture. I compiled edk with -D -D SECURE_BOOT_ENABLE and also applied some patches, with this I am getting secure boot configuration in the Boot Menu configuration. But " *AttemptSecureBoot" is disabled.* I am tried to change to standard mode to custom mode to enroll keys but NVRAM support is not there. So after reset also same default settings coming.
As NVRAM support is not there, I am planning to hard code the keys in the code or to go with standard secure boot mode. By default the edk2 is in setup mode so secure is not enabled.
How to change the secure boot mode to default user mode?

Regards,
gsen.