def boot_security_exists(handle, name, org_dn="org-root", **kwargs):
    """
    checks if boot security enabled for a boot policy

    Args:
        handle (UcsHandle)
        name (string): boot policy name
        org_dn (string): org dn
        **kwargs: key-value pair of managed object(MO) property and value, Use
                  'print(ucscoreutils.get_meta_info(<classid>).config_props)'
                  to get all configurable properties of class

    Returns:
        (True/False, LsbootBootSecurity MO/None)

    Raises:
        None

    Example:
        boot_security_exists(handle, name="sample_boot",
                          org_dn="org-root/org-finance")
    """
    dn = org_dn + "/boot-policy-" + name + "/boot-security"
    mo = handle.query_dn(dn)
    if mo is None:
        return False, None

    kwargs['secure_boot'] = "yes"
    mo_exists = mo.check_prop_match(**kwargs)
    return (mo_exists, mo if mo_exists else None)