Go to main content

Oracle® Exadata Storage Server X7-2 EF and HC Service Manual

Exit Print View

Updated: April 2019
 
 

Configure UEFI Secure Boot

  1. Access the BIOS Setup Utility menus.

    See Access BIOS Setup Utility Menus.

  2. On the BIOS Setup Utility Main Menu screen, select Security, and press Enter.
    image:This figure shows the Security Settings screen on the Main Menu.
  3. On the Security Settings screen, select Secure Boot, and press Enter.
    image:This figure shows the Secure Boot screen on the Security settings Menu.
  4. On the Secure Boot screen, select Secure Boot and press Enter. Do one of the following:
    • Select Enabled to enable UEFI Secure Boot. Continue with the next step to manage policy variables.
    • Select Disabled to disable UEFI Secure Boot. Continue with Step 8 to save changes and exit from the BIOS Setup Utility.

    When enabled, Secure Boot allows you to manage Secure Boot policy variables.

  5. To manage Secure Boot policy variables, select Key Management and press Enter.
    image:This figure shows the Key Management screen on the Security settings Menu.
  6. If you want to provision factory default keys, on the Key Management screen, select Provision Factory Defaults, and press Enter. Do one of the following:
    • Select Enabled to allow the provisioning of factory default Secure Boot keys when the system is in Setup Mode. When enabled, you can select Install Factory Default Keys to force the system to User Mode and install all the factory default Secure Boot keys.
      image:This figure shows the Install Factory Default keys screen on the Security settings Menu.
    • Select Disabled to disable the provisioning of factory default Secure Boot keys. When disabled, you can select Delete all Secure Boot Variables to remove all Secure Boot keys from the system. Selecting this option also resets the system to Setup Mode.
      image:This figure shows the Delete all Secure Boot Variables screen on the Security settings Menu.
  7. If you want to enroll an EFI image, on the Key Management screen, select Enroll Efi Image, and press Enter.
    image:This figure shows the Select a File system dialog box on the Enroll Efi Image settings Menu.
    1. In the Select a File System dialog box, scroll through the list, select the file system that contains the EFI file, and press Enter.
      image:This figure shows the Select File dialog box on the Enroll Efi Image settings Menu.
    2. In the Select File dialog box, scroll through the list, select the EFI file (or another available file), and press Enter.
      image:This figure shows the Select File dialog box on the Enroll Efi Image settings Menu.
    3. In the second Select File dialog box, scroll through the list, select the image file that you want to run in Secure Boot mode, and press Enter.
    4. To save all Secure Boot policy variables, select Save all Secure Boot variables, and press Enter.
      image:This figure shows the Select a File system dialog on the Key Management screen.
    5. In the Select a File System dialog box, select the file system where you want to save the EFI file, and press Enter.

      The Secure Boot policy variables are saved to the root folder in the target file system.

  8. Press the F10 key to save the changes and exit the BIOS Setup Utility.

Related Information

Copyright © 2017, 2019, Oracle and/or its affiliates.  
Previous
Next