How To Update Secure Boot Active Database from BIOS

Summary: Learn the steps to use the Secure Boot Default Database (DB) in the BIOS to overwrite the Active DB used to boot the operating system with Secure Boot.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Instructions

Affected Platforms:

  • Latitude
  • OptiPlex
  • Inspiron
  • Vostro
  • XPS
  • Precision Workstations
  • Dell Pro
  • Dell Pro Plus
Note: All Platforms that have shipped since 2012.

Table of Contents:

Warning: This could result in a no-boot situation if you are not familiar with Secure Boot. Secure Boot Active DB should be left to Windows Update to update. This scenario is for those users that are blocking Windows Update and understand Secure Boot requirements.
Note: You should disable BitLocker before performing these steps.

BIOS Type 1

BIOS Type 1

Note: Advanced Setup (upper left) must be turned on, to see some menus. This option may not be available in some lines of computers.

Perform the following steps:

  1. Press F2 to enter the BIOS
  2. Select Boot Configuration
  3. Turn ON Enable Custom Mode (Under Expert Key Management)
  4. Click Reset All Keys
  5. Click Apply button
  6. Click Exit button (click OK to save if prompted)
  7. On the next boot, press F2 to enter BIOS
  8. Select Boot Configuration
  9. Turn OFF Enable Custom Mode (Under Expert Key Management)
  10. Click Apply button
  11. Click Exit button (click OK to save if prompted)

Back to Top

BIOS Type 2

BIOS Type 2

Perform the following steps:

  1. Press F2 to enter the BIOS
  2. Select Secure Boot
  3. Select Expert Key Management
  4. Check that the checkbox titled Enable Custom Mode
  5. Click the Reset All Key button
  6. Click Apply button
  7. Click Exit button (click OK to save if prompted)
  8. On the next boot, press F2 to enter BIOS
  9. Select Secure Boot
  10. Select Expert Key Management
  11. Clear the checkbox titled Enable Custom Mode
  12. Click Apply button
  13. Click Exit button (click OK to save if prompted)

Back to Top

BIOS Type 3

BIOS Type 3

Perform the following steps:

  1. Press F2 to enter the BIOS
  2. Select Security tab along top
  3. Select Secure Boot
  4. Select Expert Key Management
  5. Select Customer Mode
  6. Select Enabled
  7. Select Reset All Keys
  8. Select Yes
  9. Select Exit along top
  10. Select Exit Saving Changes
  11. Select Yes
  12. On the next boot, press F2 to enter BIOS
  13. Select Security tab along top
  14. Select Secure Boot
  15. Select Expert Key Management
  16. Select Customer Mode
  17. Select Disabled
  18. Select Exit along top
  19. Select Exit Saving Changes
  20. Select Yes

Back to Top

BIOS Type 4

BIOS Type 4

Perform the following steps:

  1. Press F2 to enter the BIOS
  2. Select Security tab along top
  3. Select Secure Boot
  4. Under Expert Key Management, select Customer Mode
  5. Select Enabled
  6. Select Reset All Keys
  7. Select Yes
  8. Select Exit along top
  9. Select Exit Saving Changes
  10. Select Yes
  11. On the next boot, press F2 to enter BIOS
  12. Select Security tab along top
  13. Select Secure Boot
  14. Under Expert Key Management, select Customer Mode
  15. Select Disabled
  16. Select Exit along top
  17. Select Exit Saving Changes
  18. Select Yes

Back to Top

BIOS Type 5

BIOS Type 5

Perform the following steps:

  1. Press F2 to enter the BIOS
  2. Select Advanced along left side
  3. Select Secure Boot
  4. Under Expert Key Management, select Custom Mode
  5. Select Enabled in the dropdown
  6. Click Reset All Keys
  7. Select Yes
  8. Select Exit along left side
  9. Select Exit Saving Changes
  10. Select Yes
  11. On the next boot, press F2 to enter BIOS
  12. Select Advanced along left side
  13. Select Secure Boot
  14. Under Expert Key Management, Select Custom Mode
  15. Select Disabled in the dropdown
  16. Select Exit along left side
  17. Select Exit Saving Changes
  18. Select Yes

Back to Top

Affected Products

Alienware, Dell Pro All-in-One, Dell Pro Max Micro, Dell Pro Max Slim, Dell Pro Max Tower, Dell Pro Micro, Dell Pro Slim, Dell Pro Tower, Dell Slim, Inspiron, OptiPlex, Vostro, XPS, G Series, G Series, Alienware, Dell Laptops, Dell Plus, Dell Pro , Dell Pro Max, Dell Pro Plus, Dell Pro Premium, Inspiron, Latitude, Dell Pro Rugged, Vostro, XPS, Fixed Workstations, Mobile Workstations, Dell Pro Max Micro XE FCM2250 ...
Article Properties
Article Number: 000368610
Article Type: How To
Last Modified: 12 Sept 2025
Version:  1
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.