Secure Boot Configuration helps a computer resist attacks and infection from malware. When your computer was manufactured, UEFI created a list of keys that identify trusted hardware, firmware, and operating system loader code. It also created a list of keys to identify known malware.
When Secure Boot is enabled, the computer blocks potential threats before they can attack or infect the computer. For example, Secure Boot can prevent your computer from starting from illegally copied CDs or DVDs that could harm the computer. Also it formats the Computer with GPT which is the way to move forward. Devices like surface pro support UEFI only.
DHCP Options on Windows Server to Boot on UEFI mode For System Center Configuration Manager Task Sequence –
003 Router 10.10.10.1
006 DNS Server 10.10.10.10,10.10.10.11
015 DNS Domain Name CareExchange.in
060 PXEClient PXEClient
066 Boot Server Host Name 10.10.10.40
067 Bootfile Name smsboot\x64\wdsmgfw.efi
DHCP Options on Cisco Switch to Boot on UEFI mode For System Center Configuration Manager Task Sequence –
ip dhcp pool <name>
option 66 ascii 10.10.10.40
option 60 ascii PXEClient
To Check your Machine is on UEFI or Legacy –
Start – Run – Msinfo32