Comment # 6 on bug 1018741 from Gary Ching-Pang Lin

(In reply to lists dev from comment #5)
> > It's easier to see the logo when booting the guest with sdl or vnc, and the
> > logo will be gone quickly.
> 
> Booting to SDL did the trick.
> 
> In the TianoCore config, it says SecureBoot current state is "Enabled".
> 
> I DE-selected "Attempt SecureBoot", SAVED and restarted.
> 
> It still boots to the error message.  If I repeat config entry, it still
> says "Enabled", even thought the check-box remains DE_selected.
>
Sorry, I forgot to mention that the firmware has to be reset in a proper way.
Press "esc" two times to back to the main menu and choose "continue" and then a
prompt will hint that the system is going to reset.

For KVM with pflash, merely f10 save should be fine. The firmware can write the
data immediately to the flash file. However, xen doesn't pflash yet, so it only
writes back the data to NvVars (an emulated flash) in certain conditions, i.e.
a proper shutdown/reset.