Disable Verified Boot on Oracle Solaris 10 Guest Domains

Language:

Oracle Solaris verified boot is enabled by default in the Oracle VM Server for SPARC 3.5 software. However, Solaris 10 guest domains do not support verified boot. Always disable verified boot on Oracle Solaris 10 guest domains.

For more information about verified boot, refer to:

Configuring SPARC Verified Boot Properties in Oracle ILOM Administrator’s Guide for Configuration and Maintenance Firmware Release 4.0.x
Using Verified Boot in Securing Systems and Attached Devices in Oracle Solaris 11.3

Display the guest domain boot policy setting.
```
# ldm ls -l domain | grep boot-policy
    boot-policy=warning
```
By default, the boot policy could be set to warning. It might have been set to enforce. For Oracle Solaris 10 guest domains, the boot policy must be set to none in order to disable verified boot.

Set the guest domain boot policy setting to none.

# ldm set-domain boot-policy=none domain
The domain must be rebooted to make the boot-policy change effective.

Confirm the guest domain boot policy setting.

# ldm ls -l domain | grep boot-policy
    boot-policy=none

Reboot the guest domain.