• Firmware components and operating systems with boot loaders must have an appropriate digital
signature to execute during the boot process.
• Operating systems must support Secure Boot and have an EFI boot loader signed with one of the
authorized keys to boot. For more information about supported operating systems, see
You can customize the certificates embedded in the UEFI BIOS by adding or removing your own
certificates, either from a management console directly attached to the server, or by remotely connecting
to the server using the iLO Remote Console.
You can configure Secure Boot:
• Using the
System Utilities
options described in the following sections.
• Using the iLO RESTful API to clear and restore certificates. For more information, see the Hewlett
Packard Enterprise website (
http://www.hpe.com/info/redfish
• Using the
secboot
command in the Embedded UEFI Shell to display Secure Boot databases, keys,
and security reports.
Launching the Embedded UEFI Shell
Use the
Embedded UEFI Shell
option to launch the Embedded UEFI Shell. The Embedded UEFI Shell is
a preboot command-line environment for scripting and running UEFI applications, including UEFI boot
loaders. The Shell also provides CLI-based commands you can use to obtain system information, and to
configure and update the system BIOS.
Prerequisites
Embedded UEFI Shell
is set to
Enabled
.
Procedure
1.
From the
System Utilities
screen, select
Embedded Applications
>
Embedded UEFI Shell
.
The
Embedded UEFI Shell
screen appears.
2.
Press any key to acknowledge that you are physically present.
This step ensures that certain features, such as disabling
Secure Boot
or managing the
Secure Boot
certificates using third-party UEFI tools, are not restricted.
3.
If an administrator password is set, enter it at the prompt and press
Enter
.
The
Shell>
prompt appears.
4.
Enter the commands required to complete your task.
5.
Enter the
exit
command to exit the Shell.
HPE Smart Storage Administrator
HPE SSA is the main tool for configuring arrays on HPE Smart Array SR controllers. It exists in three
interface formats: the HPE SSA GUI, the HPE SSA CLI, and HPE SSA Scripting. All formats provide
support for configuration tasks. Some of the advanced tasks are available in only one format.
Launching the Embedded UEFI Shell
145
