If you would like to clear the "Enclave broken" message on startup, you will need a special firmware with keys in it. If you want to have your own key(for privacy, you should), you will need the tool ...