Hi,<br /><br />I want to enable secure boot in edk2. I am using edk2-2017 with coreboot for Intel architecture. I compiled edk with -D -D SECURE_BOOT_ENABLE and also applied some patches, with this I am getting secure boot configuration in the Boot Menu configuration. But "<strong>AttemptSecureBoot" is disabled.&nbsp;</strong>I am tried to change to standard mode to custom mode to enroll keys but NVRAM support is not there. So after reset also same default settings coming.<br />As NVRAM support is not there, I am planning to hard code the keys in the code or to go with standard secure boot mode. By default the edk2 is in setup mode so secure is not enabled.&nbsp; <br />How to change the secure boot mode to default user mode?<br /><br />Regards,<br />gsen.