Deployment Guide

SecureBoot
Table 216. SecureBoot
Valid Arguments
● On systems prior to 12G: NA
● On 12G and later systems: Enabled, Disabled
Description
Enables or disables the BootSeqRetry feature. When set to Enabled, the system
reattempts the boot sequence after a 30-second timeout, if the last boot attempt
has failed.
Example:
A:>syscfg --SecureBoot=Enabled
SecureBoot=Enabled
Applicable Systems PowerEdge 12G and later systems
SecureBootPolicy
Table 217. SecureBootPolicy
Valid Arguments
● On systems prior to 12G: NA
● On 12G and later systems: Standard, Custom
Description
Sets the process to authenticate pre-boot images. When set to Standard, the
BIOS uses the system manufacturer keys and certificates to authenticate pre-boot
images. When set to Custom, the BIOS uses user-defined keys and certificates. The
default value is Standard.
Example:
A:>syscfg --SecureBootPolicy=Standard
SecureBootPolicy=Standard
Applicable Systems PowerEdge 12G and later systems
UefiVariableAccess
Table 218. UefiVariableAccess
Valid Arguments
● On systems prior to 13G: NA
● On 13G and later systems: Standard, Controlled
Description
Secures the UEFI variables. When set to Standard, the UEFI variables are
accessible from the operating system as per the UEFI specification. When set to
Controlled, selected UEFI variables are protected in the operating system and
new UEFI boot entries are pushed to the end of the current boot order.
Example:
A:>syscfg --UefiVariableAccess=Standard
UefiVariableAccess=Standard
Applicable Systems PowerEdge 13G and later systems
104 SYSCFG