Oracle X7-8, Service Manual

Page: 245 / 308

Common BIOS Setup Utility Tasks
UEFI Secure Boot
Oracle Server X7-8 UEFI BIOS supports UEFI Secure Boot. UEFI Secure Boot defines how
platform firmware can authenticate a digitally signed UEFI image, such as an operating system
loader or a UEFI driver.
When enabled, UEFI Secure Boot provides a policy-based invocation of various UEFI
executable images, using cryptographic signatures to identify the software publishers. UEFI
Secure Boot also requires all third-party UEFI drivers and operating system boot loaders to be
signed by Microsoft or with Key Exchange Key (KEK) by using BIOS setup.
UEFI Secure Boot is disabled by default. For configuration information, see “Configure UEFI
Secure Boot” on page 256 .
Trusted Execution Technology
Oracle Server X7-8 uses Trusted Execution Technology (TXT), which provides authenticity of
a platform and its operating system.
When enabled, TXT ensures that the operating system (OS) starts in a trusted environment, and
provides the OS with additional security capabilities not available to an untrusted OS. Using
cryptographic techniques, TXT provides measurements of software and platform components
so that system software as well as local and remote management applications may use those
measurements to make trust decisions. Trusted Execution Technology defends against software-
based attacks aimed at stealing sensitive information by corrupting system or BIOS code, or
modifying a platform's configuration.
Trusted Execution Technology is disabled by default. For configuration information, see
“Configure Trusted Execution Technology” on page 265 .
Common BIOS Setup Utility Tasks
This section presents the procedures for some of the BIOS setup tasks that you will typically
perform when setting up and managing the server.
■
“Verify BIOS Factory Default Settings” on page 246
■
“Select a Temporary Boot Device” on page 247
■
“Configure TPM Support” on page 248
Setting Up BIOS Configuration Parameters 245