CLI Guide

Table 233. TpmCommand (continued)
NOTE: This field is read-only when TpmSecurityis set to Off.
CAUTION: Clearing TPM results in loss of all keys in the TPM. This could
affect booting to operating system.
Example:
A:>syscfg --TpmCommand=Activate
SecureBoot
Table 234. SecureBoot
Valid Arguments
● On systems prior to YX2X: NA
● On YX2X and later systems: Enabled.
Description
Enables the BootSeqRetry feature. When set to Enabled, the system re-attempts
the boot sequence after a 30-second timeout, if the last boot attempt has failed.
Example:
A:>syscfg --SecureBoot=Enabled
SecureBoot=Enabled
SecureBootPolicy
Table 235. SecureBootPolicy
Valid Arguments
● On systems prior to YX2X: NA
● On YX2X and later systems: Standard, Custom
Description
Sets the process to authenticate pre-boot images. When set to Standard, the
BIOS uses the system manufacturer keys and certificates to authenticate pre-boot
images. When set to Custom, the BIOS uses user-defined keys and certificates. The
default value is Standard.
Example:
A:>syscfg --SecureBootPolicy=Standard
SecureBootPolicy=Standard
UefiVariableAccess
Table 236. UefiVariableAccess
Valid Arguments
● On systems prior to YX3X: NA
● On YX3X and later systems: Standard, Controlled
Description
Secures the UEFI variables. When set to Standard, the UEFI variables are
accessible from the operating system as per the UEFI specification. When set to
Controlled, selected UEFI variables are protected in the operating system and
new UEFI boot entries are pushed to the end of the current boot order.
106 SYSCFG