Reference Guide

certificate. The policy may also authorize hash values of individual UEFI driver
images. Users can configure the Secure Boot feature and the Secure Boot policy in
F2 System Setup > System BIOS > Security Settings page.
Recommended
Response Action
If the Secure Boot feature is not desired, disable it in System Setup > System BIOS >
Security Settings page. Otherwise, do the following: 1) Make sure the firmware on
the failing device is up-to-date. 2) If subsequent failures occur, review the Secure
Boot Policy Summary in System Setup > System BIOS > Security Settings page. The
device firmware must be authorized by a public key or hash value in the Authorized
Signature Database. The public key or hash value must not be present in the
Forbidden Signature Database.
Category Configuration (UEFI = UEFI Event)
Severity Severity 2 (Warning)
Filter
Visibility
IPMI
Alert
SNMP
Alert
Email
Alert
Remote System
Log
WS
Eventing
iDRAC
CMC
LC Log LCD OS Log Power
Off
Power
Cycle
Reset Chassis Event
Proxy
iDRAC ✔*
CMC
UEFI0073
Message Unable to boot arg1 because of the Secure Boot policy.
Arguments arg1 = Boot Option name
Detailed
Description
When the Secure Boot feature is enabled, the system BIOS authenticates each boot
option against the Secure Boot policy. If a boot option does not meet the policy
criteria, the system BIOS does not boot to the boot option and displays this
message. The Secure Boot policy consists of authorized and unauthorized X.509
certificates; signed boot images must chain to an authorized certificate. The policy
may also authorize hash values of individual boot images. Users can configure the
Secure Boot feature and the Secure Boot policy in System Setup > System BIOS >
Security Settings page.
Recommended
Response Action
If the Secure Boot feature is not desired, disable it in System Setup > System BIOS >
Security Settings page. Otherwise, do the following: 1) review the Secure Boot
Policy Summary in F2 System Setup > System BIOS > Security Settings page. The
boot option must be authorized by a public key or hash value in the Authorized
Signature Database. 2) If the boot option is not authorized but it can be trusted,
enter System Setup > System BIOS > Security Settings page, set Secure Boot Policy
to Custom, and add a entry for the boot option in the Authorized Signature
Database (System Setup > System BIOS > Security Settings > Custom Policy
Settings > Authorized Signature Database > Import Database Entry).
2017