Uefi Secure Boot; Trusted Execution Technology; Common Bios Setup Utility Tasks - Oracle X7-8 Service Manual

UEFI Secure Boot

Oracle Server X7-8 UEFI BIOS supports UEFI Secure Boot. UEFI Secure Boot defines how
platform firmware can authenticate a digitally signed UEFI image, such as an operating system
loader or a UEFI driver.
When enabled, UEFI Secure Boot provides a policy-based invocation of various UEFI
executable images, using cryptographic signatures to identify the software publishers. UEFI
Secure Boot also requires all third-party UEFI drivers and operating system boot loaders to be
signed by Microsoft or with Key Exchange Key (KEK) by using BIOS setup.
UEFI Secure Boot is disabled by default. For configuration information, see
Secure Boot" on page

Trusted Execution Technology

Oracle Server X7-8 uses Trusted Execution Technology (TXT), which provides authenticity of
a platform and its operating system.
When enabled, TXT ensures that the operating system (OS) starts in a trusted environment, and
provides the OS with additional security capabilities not available to an untrusted OS. Using
cryptographic techniques, TXT provides measurements of software and platform components
so that system software as well as local and remote management applications may use those
measurements to make trust decisions. Trusted Execution Technology defends against software-
based attacks aimed at stealing sensitive information by corrupting system or BIOS code, or
modifying a platform's configuration.
Trusted Execution Technology is disabled by default. For configuration information, see
"Configure Trusted Execution Technology" on page

Common BIOS Setup Utility Tasks

This section presents the procedures for some of the BIOS setup tasks that you will typically
perform when setting up and managing the server.
"Verify BIOS Factory Default Settings" on page 286
■
"Select a Temporary Boot Device" on page 287
■
296.
Common BIOS Setup Utility Tasks
"Configure UEFI
305.
Setting Up BIOS Configuration Parameters 285