One Comment on “Which option does UEFI secure boot provide?”

1. joao cu-pau-duro says:

   March 28, 2017 at 9:38 pm

   Overview to UEFI Secure Boot
   You can use Unified Extensible Firmware Interface (UEFI) secure boot to ensure that all the EFI drivers, EFI applications, option ROM or operating systems prior to loading and execution are signed and verified for authenticity and integrity, before you load and execute the operating system. You can enable this option using either web UI or CLI. When you enable UEFI secure boot mode, the boot mode is set to UEFI mode and you cannot modify the configured boot mode until the UEFI boot mode is disabled.

   Note
   If you enable UEFI secure boot on a nonsupported OS, on the next reboot, you cannot boot from that particular OS. If you try to boot from the previous OS, an error is reported and recorded the under system software event in the web UI. You must disable the UEFI secure boot option using Cisco IMC to boot from your previous OS.
   Important:
   Also, if you use an unsupported adapter, an error log event in Cisco IMC SEL is recorded. The error messages is displayed that says:

   System Software event: Post sensor, System Firmware error. EFI Load Image Security Violation. [0x5302] was asserted .

   UEFI secure boot is supported on the following components:
   Components Types
   Supported OS
   Windows Server 2012
   Windows Server 2012 R2
   Broadcom PCI adapters
   5709 dual and quad port adapters
   57712 10GBASE-T adapter
   57810 CNA
   57712 SFP port
   Intel PCI adapters
   i350 quad port adapter
   X520 adapter
   X540 adapter
   LOM
   QLogic PCI adapters
   8362 dual port adapter
   2672 dual port adapter
   Fusion-io
   LSI
   LSI MegaRAID SAS 9240-8i
   LSI MegaRAID SAS 9220-8i
   LSI MegaRAID SAS 9265CV-8i
   LSI MegaRAID SAS 9285CV-8e
   LSI MegaRAID SAS 9285CV-8e
   LSI MegaRAID SAS 9266-8i
   LSI SAS2008-8i mezz
   LSI Nytro card

   
   
   
   0

   
   
   
   0