Raspberry Pi secure boot is permanent: plan keys before using rpi-sb-provisionerwarning · unverified · Enabling secure boot programs OTP fuses: it can't be disabled and the key can't be changed afterwards. rpi-sb-provisioner automates secure boot, full-disk encryption and OS deployment for fleets, with a no-security mode for development.