No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Huawei Server Brickland Platform BIOS Parameter Reference 23

This document describes the basic input/output system (BIOS) menu structure, parameters and common tasks based on the Brickland platform.
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Setting UEFI Secure Boot

Setting UEFI Secure Boot

Secure Boot is a security technology defined by the Unified Extensible Firmware Interface (UEFI) specification to ensure security of the boot environment.

Before installing OS, third-party driver, or cards on a server, check whether they support digital signature. If they do not support digital signature, disable Secure Boot. If they support digital signature, enable Secure Boot for security purpose.

Procedure

  • Enabling Secure Boot
    1. Log in to the BIOS Setup Utility.

      For details, see 2.1 .

    2. On the Boot screen, set Boot mode select to UEFI, Network and Storage to UEFI only, and Other PCI devices to UEFI first.
      Figure 2-12 Boot screen

    3. Choose Security > Secure Boot menu, and set Secure Boot to Enable, as shown in Figure 2-13.
      Figure 2-13 Secure Boot menu screen
    4. Choose Key Management, and set Provision Factory Default keys to Enable.

      The dialog box shown in Figure 2-14 is displayed.

      Figure 2-14 Key Management screen
    5. Select Yes and press Enter, and press F10.

      The system displays "Save configuration and exit?"

    6. Select Yes and press Enter to save the settings and restart the server.
    7. On the BIOS Setup interface, choose Security > Secure Boot menu and check Secure Boot and Vendor Keys.

      If Secure Boot and Vendor Keys are Active, Secure Boot is enabled.

      Figure 2-15 Security screen
    8. Check the PCIe devices on the Advanced screen, as shown in Figure 2-16.
      Figure 2-16 Advanced screen
      • Intel(R) Ethernet Server Adapter indicates the digital signature of the third-party driver.
      • I340-T4 indicates the PCIe card type.
      • 90:E2:BA:AC:E7:64 indicates the MAC address.
      NOTE:

      The PCIe card must have a UEFI driver with digital signature. Otherwise, it cannot be loaded.

  • Disabling Secure Boot
    1. Log in to the BIOS Setup Utility.

      For details, see 2.1 .

    2. Choose Security > Secure Boot menu, and set Secure Boot to Disable.
      Figure 2-17 Secure Boot menu screen
    3. On the Key Management screen, set Provision Factory Default keys to Disable.
      Figure 2-18 Key Management screen
    4. Press F10.

      The system displays "Save configuration and exit?"

    5. Select Yes and press Enter to save the settings and restart the server.
    6. On the BIOS Setup interface, choose Security > Secure Boot menu and check Secure Boot and Vendor Keys.

      If Secure Boot and Vendor Keys are Not Active, Secure Boot is disabled.

    7. On the Advanced screen, check that there is no PCIe device.
Translation
Download
Updated: 2018-12-03

Document ID: EDOC1000039573

Views: 74009

Downloads: 925

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next