2.2.1 Enabling Secure Boot on Exadata System Hardware
Secure Boot is enabled by default on supported Exadata storage servers, bare metal database servers, and KVM hosts.
Note:
Secure Boot is not supported on Xen-based Oracle VM Servers (Dom0) and Oracle VM guests (DomU).
Oracle recommends that you leave the default Secure Boot option setting.
You can enable (or disable) Secure Boot by pressing F12 during the boot process, navigating to the EFI boot menu and changing the Secure Boot setting.
To verify the status of the Secure Boot option, use the following command:
# mokutil --sb-state
SecureBoot enabled
Parent topic: Restricting the Binaries Used to Boot the System