Intel H110 Technical Manual page 51

 Secure Boot
Press [Enter] to make customized secure settings:
System Mode
Secure Boot
Vendor Keys
Secure Boot
Secure Boot activated when Platform Key(PK) is enrolled, System mode is
User/Deployed, and CSM function is disabled.
The mode change requires platform reset.
The optional settings: [Disabled]; [Enabled].
Secure Boot Mode
Use this item to Secure Boot mode to Standard mode or Custom mode. This
change is effective after save. After reset, this mode will return to Standard mode.
In Custom mode, Secure Boot Policy variables can be configured by a physically
present user without full authentication.
The optional settings: [Standard]; [Custom].
When set as [Custom], user can make further settings in the following items that
show up:
 Key Management
This item enables expert users to modify Secure Boot Policy variables without full
authentication, which includes the following items:
Provision Factory Defaults
This item allows to provision factory default Secure Boot keys when System is in
Setup Mode.
The optional settings: [Disabled]; [Enabled].

Install Factory Default Keys
Use this item to force System to User Mode. Install all Factory Default keys.

Enroll Efi Image
This item allows the image to run in Secure Boot mode.
Enroll SHA256 Hash certificate of a PE image into Authorized Signature Database
(db).
46