Add-In Cards; Pcie Connector Special Configuration; Security Menu - Oracle Exadata X10M Service Manual

Add-in Cards

Add-in Cards Option
Slot 1-9
PCIe UEFI Driver Enable
Slot 100-103

PCIe Connector Special Configuration

PCIe Connector
Slot 1-9 PCIe Connector Configuration

Security Menu

Security Menu Option
System Mode
Attempt Secure Boot
Secure Boot Mode
Restore Factory Keys
Reset to Setup Mode
Enter Audit Mode
Enter Deployed Mode
Key Management
Factory Key Provision
Restore Factory Keys
Enroll EFI Image
Export Secure Boot Variables
Description
Displays and provides options to change the settings of the devices
in PCIe slots.
Enable (default) or disable PCI-E UEFI Driver. If set to enabled,
UEFI Driver for the card executes as normal. If set to disabled, UEFI
Driver for the card is not copied into memory and the execution of
the UEFI Driver is inhibited.
Displays and provides options to change the settings of the devices
in NVMe slots.
Description
Specify the connector to control PCIe bifurcation and hotplug.
Description
Secure Boot is activated when Platform Key (PK) is enrolled,
System mode is User (default) or Deployed, and the Compatibility
Support Module (CSM) function is disabled.
When enabled (default), Secure Boot is activated when Platform
Key (PK) is enrolled, System mode is User or Deployed, and the
Compatibility Support Module (CSM) function is disabled.
Specifies Standard or Custom (default) Secure Boot mode. In
Custom mode, you can configure secure boot policy variables by a
physically present user without full authentication.
Forces system to User mode. Installs factory default Secure Boot
key databases.
Removes all secure boot key databases from NVRAM.
Resets the system to Audit Mode workflow and erases the PK
variable.
Transitions between Deployment and User modes.
Allows expert users to change Secure Boot Policy variables without
variable authentication.
Enables (default) provisioning factory default Secure Boot keys after
the platform reset and while the system is in Setup Mode.
Forces the system to User mode. Installs factory default Secure
Boot key databases.
Enrolls an EFI image to run in Secure Boot mode. Enroll SHA256
Hash certificate of a PE image into Authorized Signature Database.
Select a file system to copy the NVRAM content of Secure Boot
variables to files in a root folder on a file system device.
Appendix F
Security Menu
F-12