Configure Uefi Secure Boot - Oracle Exadata X10M Service Manual

•
Press the F10 key to save the changes and exit the BIOS Setup Utility.
6.

Configure UEFI Secure Boot

Access the BIOS Setup Utility menus.
1.
On the Main screen, select Security and press Enter.
2.
On the Security Settings screen, select Secure Boot and press Enter.
3.
On the Secure Boot screen, select Attempt Secure Boot and press Enter. Do one of
4.
the following:
•
•
When enabled, Secure Boot allows you to manage Secure Boot policy variables.
To manage Secure Boot policy variables, select Key Management and press Enter.
5.
The Key Management screen provides options to provision factory default Secure Boot
keys or to enroll an Extensible Firmware Interface (EFI) image.
•
•
If you want to provision factory default keys, select Factory Key Provision and press
6.
Enter. Do one of the following:
•
•
If you want to enroll an EFI image, select Enroll Efi Image and press Enter.
7.
a.
b.
c.
d.
e.
Select x4x4x4x4 HP ENABLED Aura-9 to enable x4x4x4 HP ENABLED Oracle
Flash Accelerator F640 PCIe Card v3 special configure this slot's connector.
Select Enabled to enable UEFI Secure Boot. Continue with the next step to manage
policy variables.
Select Disabled to disable UEFI Secure Boot. Continue with
changes and exit from the BIOS Setup Utility.
To provision factory default keys – See
To enroll an EFI image – See
Select Enabled to allow the provisioning of factory default Secure Boot keys when
the system is in Setup Mode. When enabled, you can select Restore Factory
Keys to force the system to User Mode and install all the factory default Secure Boot
keys.
Select Disabled to disable the provisioning of factory default Secure Boot keys.
When disabled, you can select Delete all Secure Boot Variables to remove
all Secure Boot keys from the system. Selecting this option also resets the system to
Setup Mode.
On the Select a File System screen, scroll through the list and select the file system
that contains the EFI file, and press Enter.
On the Select File screen, scroll through the list and select the EFI file (or another
available file), and press Enter.
On the next Select File screen, scroll through the list and select the image file that
you want to run in Secure Boot mode, and press Enter.
To save all Secure Boot policy variables, select Save all Secure Boot variables and
press Enter.
On the Select a File System screen, select the file system where you want to save
the EFI file, and press Enter.
The Secure Boot policy variables are saved to the root folder in the target file system.
Step 6.
Step 7.
Chapter 18
Common BIOS Setup Utility Tasks
Step 8 to save
18-7