Go to main content

Oracle® Exadata X8-2 Database Server Service Manual

Exit Print View

Updated: July 2020
 
 

Configure UEFI Secure Boot

  1. Access the BIOS Setup Utility menus.

    See Access BIOS Setup Utility Menus.

  2. On the Main Menu screen, select Security and press Enter.
    image:This figure shows the Security Settings screen within the Main Menu.
  3. On the Security Settings screen, select Secure Boot and press Enter.
    image:This figure shows the Secure Boot screen within the Security settings Menu.
  4. On the Secure Boot screen, select Attempt Secure Boot and press Enter. Do one of the following:
    • Select Enabled to enable UEFI Secure Boot. Continue with the next step to manage policy variables.
    • Select Disabled to disable UEFI Secure Boot. Continue with Step 8 to save changes and exit from the BIOS Setup Utility.

    When enabled, Secure Boot allows you to manage Secure Boot policy variables.

  5. To manage Secure Boot policy variables, select Key Management and press Enter.

    The Key Management screen provides options to provision factory default Secure Boot keys or to enroll an Extensible Firmware Interface (EFI) image.

    • To provision factory default keys – See Step 6.

    • To enroll an EFI image – See Step 7.


    image:This figure shows the Key Management screen within the Security settings Menu.
  6. If you want to provision factory default keys, select Factory Key Provision and press Enter. Do one of the following:
    • Select Enabled to allow the provisioning of factory default Secure Boot keys when the system is in Setup Mode. When enabled, you can select Restore Factory Keys to force the system to User Mode and install all the factory default Secure Boot keys.
      image:This figure shows the Install Factory Default keys screen within the Security settings Menu.
    • Select Disabled to disable the provisioning of factory default Secure Boot keys. When disabled, you can select Delete all Secure Boot Variables to remove all Secure Boot keys from the system. Selecting this option also resets the system to Setup Mode.
      image:This figure shows the Delete all Secure Boot Variables screen within the Security settings Menu.
  7. If you want to enroll an EFI image, select Enroll Efi Image and press Enter.
    image:This figure shows the Select a File system dialog within the Enroll Efi Image settings Menu.
    1. On the Select a File System screen, Scroll through the list and select the file system that contains the EFI file and press Enter.
      image:This figure shows the Select File dialog within the Enroll Efi Image settings Menu.
    2. On the Select File screen, scroll through the list and select the EFI file (or another available file) and press Enter.
      image:This figure shows the Select File dialog within the Enroll Efi Image settings Menu.
    3. On the next Select File screen, scroll through the list and select the image file that you want to run in Secure Boot mode and press Enter.
    4. To save all Secure Boot policy variables, select Save all Secure Boot variables and press Enter.
      image:This figure shows the Select a File system dialog within the Key Management screen.
    5. On the Select a File System screen, select the file system where you want to save the EFI file and press Enter.

      The Secure Boot policy variables are saved to the root folder in the target file system.

  8. Press the F10 key to save the changes and exit the BIOS Setup Utility.

Related Information

Copyright © 2019, 2020, Oracle and/or its affiliates.  
Previous
Next