Which option does UEFI secure boot provide?
A.
checksum verification of the EFI shell
B.
certificate verification of the EFI shell
C.
checksum verification of the OS
D.
certificate verification of the OS
Which option does UEFI secure boot provide?
Which option does UEFI secure boot provide?
A.
checksum verification of the EFI shell
B.
certificate verification of the EFI shell
C.
checksum verification of the OS
D.
certificate verification of the OS
Overview to UEFI Secure Boot
You can use Unified Extensible Firmware Interface (UEFI) secure boot to ensure that all the EFI drivers, EFI applications, option ROM or operating systems prior to loading and execution are signed and verified for authenticity and integrity, before you load and execute the operating system. You can enable this option using either web UI or CLI. When you enable UEFI secure boot mode, the boot mode is set to UEFI mode and you cannot modify the configured boot mode until the UEFI boot mode is disabled.
Note
If you enable UEFI secure boot on a nonsupported OS, on the next reboot, you cannot boot from that particular OS. If you try to boot from the previous OS, an error is reported and recorded the under system software event in the web UI. You must disable the UEFI secure boot option using Cisco IMC to boot from your previous OS.
Important:
Also, if you use an unsupported adapter, an error log event in Cisco IMC SEL is recorded. The error messages is displayed that says:
System Software event: Post sensor, System Firmware error. EFI Load Image Security Violation. [0x5302] was asserted .
UEFI secure boot is supported on the following components:
Components Types
Supported OS
Windows Server 2012
Windows Server 2012 R2
Broadcom PCI adapters
5709 dual and quad port adapters
57712 10GBASE-T adapter
57810 CNA
57712 SFP port
Intel PCI adapters
i350 quad port adapter
X520 adapter
X540 adapter
LOM
QLogic PCI adapters
8362 dual port adapter
2672 dual port adapter
Fusion-io
LSI
LSI MegaRAID SAS 9240-8i
LSI MegaRAID SAS 9220-8i
LSI MegaRAID SAS 9265CV-8i
LSI MegaRAID SAS 9285CV-8e
LSI MegaRAID SAS 9285CV-8e
LSI MegaRAID SAS 9266-8i
LSI SAS2008-8i mezz
LSI Nytro card