Should: - [ ] Iterate over all real block devices (not partitions) - [ ] If they have TCG capability **and** MBREnabled **and** (Locked=1 **or** MBRDone=0) - [ ] Unlock locked ranges - [ ] Set MBRDone=1 - [ ] If all actions are successful, and there has been at least one MBRDone=1 change, verify EFI boot order and reboot.
Should: