通过u盘启动禁用驱动签名和PG

EfiGuard下载地址

https://github.com/Mattiwatti/EfiGuard

使用步骤

Booting the loader

1、Download EfiGuard and rename EFI/Boot/Loader.efi to bootx64.efi.
2、Place the files on a boot drive such as a FAT32 formatted USB stick (for physical machines) or an ISO/virtual disk (for VMs). Assuming drive X:, the paths for the two files should now be X:/EFI/Boot/{bootx64|EfiGuardDxe}.efi
3、Boot the machine from the drive you used in step 2. Most firmwares provide a boot menu to do this via F8/F10/F11/F12. If not, you will need to configure the BIOS to boot from the new drive.
4、Windows should now boot, and you should see EfiGuard messages during boot.
5、If you booted with the SetVariable hook (the default), run EfiDSEFix.exe -d from an Administrator command prompt after boot to disable DSE, or run EfiDSEFix.exe to see the full list of options.

翻译：
1、下载EfiGuard，解压后，重命名 EFI/Boot/Loader.efi --> EFI/Boot/bootx64.efi
2、将u盘格式化为FAT32，把解压后文件放到u盘，目录结构为 ?:/EFI/Boot/bootx64.efi
3、重启进入bios，通过u盘启动，可能会重启2次
4、进入系统后，管理员打开cmd，进入到u盘盘符，执行EfiDSEFix.exe -d，即可关闭驱动签名，加载无签名的驱动文件