What is "Install the Default Secure Boot Keys"? Option Appeared After Resetting Bios

Question

I reset my Bios to see the default settings for Secure Boot, and after reenabling it by setting the option to 'Windows UEFI Mode', I clicked the "Secure Boot Keys" option to see what was in there

I've never tinkered with keys like this and have no real intention of doing so, but I was met with a new option that said "Install the Default Secure Boot Keys"

I figured this was something spawned from resetting the Bios that I should do so Secure Boot would work; I clicked it and it didn't seem to do anything, but the option was gone the next time I went into the Bios

according to PowerShell and System Information, Secure Boot is enabled/working, but what were those "Install Default Secure Boot Keys" that it presented me with? is this added security or something that could be exploited easier by attackers?

what exactly did I "install" when clicking that option? my OS is Windows 10 22H2

Answer 1

The "Install the Default Secure Boot Keys" option appears after resetting the BIOS because it restores the default Secure Boot keys to the motherboard's firmware. The default Secure Boot keys are provided by the motherboard manufacturer. If you reset the BIOS, the default Secure Boot keys may be removed.

Here are the steps on how to install the default Secure Boot keys:

1. Enter the BIOS setup.
2. Navigate to the Security tab.
3. Select the Secure Boot option.
4. Select the Install Default Keys option.
5. Press Enter to install the default Secure Boot keys.
6. Exit the BIOS setup.