Secure Boot
Secure Boot
Secure Boot is a server security feature that is implemented in the BIOS and does not require special hardware. Secure Boot ensures
that each component launched during the boot process is digitally signed and that the signature is validated against a set of trusted
certificates embedded in the UEFI BIOS. Secure Boot validates the software identity of the following components in the boot process:
UEFI drivers loaded from PCIe cards
UEFI drivers loaded from mass storage devices
Preboot UEFI Shell applications
OS UEFI boot loaders
When Secure Boot is enabled:
Firmware components and operating systems with boot loaders must have an appropriate digital signature to execute during the
boot process.
Operating systems must support Secure Boot and have an EFI boot loader signed with one of the authorized keys to boot. For more
information about supported operating systems, see https://www.hpe.com/servers/ossupport
https://www.hpe.com/servers/ossupport.
You can customize the certificates embedded in the UEFI BIOS by adding or removing your own certificates, either from a management
console directly attached to the server, or by remotely connecting to the server using the iLO Remote Console.
You can configure Secure Boot:
Using the System Utilities options described in the following sections.
Using the iLO RESTful API to clear and restore certificates. For more information, see the Hewlett Packard Enterprise website
(https://www.hpe.com/info/redfish
https://www.hpe.com/info/redfish).
Using the
secboot
command in the Embedded UEFI Shell to display Secure Boot databases, keys, and security reports.
Secure Boot
176
Содержание HPE ProLiant DL365 Gen10 Plus Server
Страница 7: ...10 5 Regulatory information 10 6 Documentation feedback ...
Страница 8: ...Component identification Component identification 8 ...
Страница 24: ...Device numbers 8 SFF device bay numbering 8 SFF 2 SFF device bay numbering Device numbers 24 ...
Страница 25: ...Drives Drives 25 ...
Страница 29: ...Fan bay numbering Fan bay numbering 29 ...
Страница 30: ...Operations Operations 30 ...
Страница 45: ...Setup Setup 45 ...
Страница 62: ...Hardware options installation Hardware options installation 62 ...
Страница 78: ...Installing an 8 SFF optical drive 78 ...
Страница 79: ...Universal media bay options Universal media bay options 79 ...
Страница 97: ...Secondary PCI riser options Secondary PCI riser options 97 ...
Страница 104: ...Full length Installing an expansion board in the secondary riser cage 104 ...
Страница 118: ...Installing an HPE Smart Array P816i a SR Gen10 Controller option 118 ...
Страница 119: ...Processor and heatsink options Processor and heatsink options 119 ...
Страница 143: ...HPE Trusted Platform Module 2 0 Gen10 Plus option HPE Trusted Platform Module 2 0 Gen10 Plus option 143 ...
Страница 146: ...Installing and enabling the HPE TPM 2 0 Gen10 Plus option Installing and enabling the HPE TPM 2 0 Gen10 Plus option 146 ...
Страница 147: ...Installing the Trusted Platform Module board Installing the Trusted Platform Module board 147 ...
Страница 156: ...Software and configuration utilities Software and configuration utilities 156 ...
Страница 185: ...Keeping the system current Keeping the system current 185 ...
Страница 198: ...Troubleshooting Troubleshooting 198 ...
Страница 200: ...Cabling Cabling 200 ...
Страница 217: ...Support and other resources Support and other resources 217 ...