Table of Contents
Advertisement
NOTE: The boot mode you use must match the operating system installation. If not, changing the boot mode can impact
the ability of the server to boot to the installed operating system.
Prerequisite
When booting to UEFI Mode, leave UEFI Optimized Boot enabled.
Procedure
1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration (RBSU) > Boot
Options > Boot Mode.
2. Select a setting.
UEFI Mode (default)—Configures the system to boot to a UEFI compatible operating system.
•
•
Legacy BIOS Mode—Configures the system to boot to a traditional operating system in Legacy BIOS compatibility
mode.
3. Save your setting.
4. Reboot the server.
Secure Boot
Secure Boot is a server security feature that is implemented in the BIOS and does not require special hardware. Secure
Boot ensures that each component launched during the boot process is digitally signed and that the signature is validated
against a set of trusted certificates embedded in the UEFI BIOS. Secure Boot validates the software identity of the
following components in the boot process:
•
UEFI drivers loaded from PCIe cards
•
UEFI drivers loaded from mass storage devices
•
Preboot UEFI Shell applications
•
OS UEFI boot loaders
When Secure Boot is enabled:
•
Firmware components and operating systems with boot loaders must have an appropriate digital signature to execute
during the boot process.
•
Operating systems must support Secure Boot and have an EFI boot loader signed with one of the authorized keys to
boot. For more information about supported operating systems, see http://www.hpe.com/servers/ossupport.
You can customize the certificates embedded in the UEFI BIOS by adding or removing your own certificates, either from a
management console directly attached to the server, or by remotely connecting to the server using the iLO Remote
Console.
You can configure Secure Boot:
Software and configuration utilities
127
Advertisement
Table of Contents
