Table of Contents
Advertisement
•
Preboot UEFI Shell applications
•
OS UEFI boot loaders
When Secure Boot is enabled:
•
Firmware components and operating systems with boot loaders must have an appropriate digital signature
to execute during the boot process.
•
Operating systems must support Secure Boot and have an EFI boot loader signed with one of the
authorized keys to boot. For more information about supported operating systems, see http://
www.hpe.com/servers/ossupport.
You can customize the certificates embedded in the UEFI BIOS by adding or removing your own certificates,
either from a management console directly attached to the server, or by remotely connecting to the server
using the iLO Remote Console.
You can configure Secure Boot:
•
Using the System Utilities options described in the following sections.
•
Using the iLO RESTful API to clear and restore certificates. For more information, see the Hewlett Packard
Enterprise website (http://www.hpe.com/info/redfish).
•
Using the secboot command in the Embedded UEFI Shell to display Secure Boot databases, keys, and
security reports.
Launching the Embedded UEFI Shell
Use the Embedded UEFI Shell option to launch the Embedded UEFI Shell. The Embedded UEFI Shell is a
pre-boot command-line environment for scripting and running UEFI applications, including UEFI boot loaders.
The Shell also provides CLI-based commands you can use to obtain system information, and to configure and
update the system BIOS.
Prerequisites
Embedded UEFI Shell is set to enabled.
Procedure
1. From the System Utilities screen, select Embedded Applications > Embedded UEFI Shell.
The Embedded UEFI Shell screen appears.
2. Press any key to acknowledge that you are physically present.
This step ensures that certain features, such as disabling Secure Boot or managing the Secure Boot
certificates using third-party UEFI tools, are not restricted.
3. If an administrator password is set, enter it at the prompt and press Enter.
The Shell> prompt appears.
4. Enter the commands required to complete your task.
5. Enter the exit command to exit the Shell.
HPE Smart Storage Administrator
HPE SSA is the main tool for configuring arrays on HPE Smart Array SR controllers. It exists in three interface
formats: the HPE SSA GUI, the HPE SSA CLI, and HPE SSA Scripting. All formats provide support for
configuration tasks. Some of the advanced tasks are available in only one format.
The diagnostic features in HPE SSA are also available in the standalone software HPE Smart Storage
Administrator Diagnostics Utility CLI.
During the initial provisioning of the server or compute module, an array is required to be configured before
the operating system can be installed. You can configure the array using SSA.
166
Launching the Embedded UEFI Shell
Advertisement
Table of Contents
