Enable Uefi Secure Boot - Lenovo ThinkSystem SR665 Maintenance Manual

Enable UEFI Secure Boot

Optionally, you can enable UEFI Secure Boot.
Physical Presence must be asserted if you are going to enable UEFI Secure Boot. See "(Optional) assert
physical presence" on page 376.
For information about accessing the Lenovo XClarity Controller interface, see:
http://sysmgt.lenovofiles.com/help/topic/com.lenovo.systems.management.xcc.doc/dw1lm_c_chapter2_
openingandusing.html
There are two methods available to enable UEFI Secure Boot:
• From Lenovo XClarity Provisioning Manager V3
To enable UEFI Secure Boot from Lenovo XClarity Provisioning Manager V3:
1. Start the server and when prompted, press F1 to display Lenovo XClarity Provisioning Manager V3.
2. If the power-on Administrator password is required, enter the password.
3. From the UEFI Setup page, click System Settings ➙ Security ➙ Secure Boot.
4. Enable Secure Boot and save the settings.
• From Lenovo XClarity Essentials OneCLI
To enable UEFI Secure Boot from Lenovo XClarity Essentials OneCLI:
1. Download and install Lenovo XClarity Essentials OneCLI.
a. Go to
http://datacentersupport.lenovo.com
b. Click Drivers & Software.
c. Navigate to the version of Lenovo XClarity Essentials OneCLI for your operating system and
download the package.
2. Run the following command to enable Secure Boot:
OneCli.exe config set SecureBootConfiguration.SecureBootSetting Enabled --override
where:
– <userid>:<password> are the credentials used to access the BMC (Lenovo XClarity Controller
interface) of your server. The default user ID is USERID, and the default password is PASSW0RD
(zero, not an uppercase o).
– <ip_address> is the IP address of the BMC.
For more information about the Lenovo XClarity Essentials OneCLI s s e e t t command, see:
http://sysmgt.lenovofiles.com/help/topic/toolsctr_cli_lenovo/onecli_r_set_command.html
3. Alternatively, you can use the following Advanced Settings Utility (ASU) commands:
To enable secure boot:
asu64.exe set SecureBootConfiguration.SecureBootis Enabled -v --override --host <ip_address>
--user <userid> --password <password>
To disable secure boot:
asu64.exe set SecureBootConfiguration.SecureBootis Disabled -v --override --host <ip_address>
--user <userid> --password <password>
To read the secure boot setting:
asu64.exe show SecureBootConfiguration.SecureBootis -v --override --host <ip_address>
--user <userid> --password <password>
ThinkSystem SR665 Maintenance Manual
378
--imm <userid>:<password>@<ip_address>
and navigate to the support page for your server.