Search for	Example	Results
A single word	`cat`	Topics that contain the word "cat". You will also find its grammatical variations, such as "cats".
A phrase. You can specify that the search results contain a specific phrase.	`"cat food"` (quotation marks)	Topics that contain the literal phrase "cat food" and all its grammatical variations. Without the quotation marks, the query is equivalent to specifying an OR operator, which finds topics with one of the individual words instead of the phrase.

Search for	Operator	Example
Two or more words in the same topic	`AND` `and` `+` (plus symbol) `&` (ampersand)	`cat AND dog` `"cat food"+milk` `"cat food"&"dog food"`
Either word in a topic	`OR` `or` `\|` (pipe)	`cat OR dog` `cat \| dog`
Topics that do not contain a specific word or phrase	`NOT` `not` `!` (exclamation point)	`NOT cat` `! dog`
Topics that contain one string and do not contain another	`^` (caret)	`cat ^ mouse`
A combination of search types	`( )` parentheses	`cat + (dog \| mouse)` `cat \| dog + (! mouse)`

Server Automation10.51

Administer > SA UEFI Secure-Boot Server Provisioning

SA UEFI Secure-Boot Server Provisioning

The Unified Extensible Firmware Interface (UEFI) is a specification that defines a software interface between personal-computer operating system and platform firmware. UEFI replaces the Basic Input/Output System (BIOS) firmware interface present in all IBM PC-compatible personal computers.

The interface consists of data tables that contain platform-related information, plus boot and runtime service calls that are available to the operating system and its loader. Together, these provide a standard environment for booting an operating system and running pre-boot applications. In practice, most UEFI images provide legacy support for BIOS services. UEFI can support remote diagnostics and repair of computers, even without another operating system. For more information, see http://www.uefi.org/.

UEFI encourages code reuse, modularization, flexibility and modernization. UEFI specifications contain interfaces that streamline and aid in firmware innovation by promoting interoperability between devices, software and systems. UEFI supports diagnostics and repair, even without an installed operating system. UEFI also supports more secure systems, faster boot times, extensibility and modularity.

UEFI secure boot

UEFI Secure Boot improves security in the pre-boot environment and provides firmware, operating system and hardware a defense against potential malware attacks. UEFI Secure Boot uses signed components that are started by the system firmware and requires signed fw-drivers for the components (for example NIC,HD or RAID-like SmartArray, etc.) as well as signed boot loaders, OS kernels and OS drivers.

Supported UEFI capable hardware

SA supports UEFI and UEFI Secure Boot on the Gen8 ProLiant DL580 including legacy BIOS and UEFI boot modes.

LEGACY: the server behaves like a standard BIOS based machine (secure boot not available)

Boot Mode: “Legacy”

UEFI: Secure Boot can be enabled/disabled

Boot Mode: UEFI_OPTIMIZED

The default mode of operation

Boot Mode: UEFI_OPTIMIZED_SECURE

Secure Boot enabled UEFI boot mode

Boot Mode: UEFI

UEFI - “optimized mode” disabled - fallback mode for older Windows OSes (for example, Windows Server 2008) which require special interrupt handling.

Supported operating systems

Secure Boot is supported in P79 1.00 ROM and later. HPE highly recommends that you use the latest firmware update. See the HPE ProLiant Support Page: http://h20565.www2.hp.com/portal/site/hpsc/public/psi/home/

Windows Server 2012 r2 x64
Supported boot loader: pxelinux
Supported SOS: WinPE 2.1 (32bit) / 3.1 (64bit), Gaius Linux, Gaius WinPE

Provisioning an ProLiant DL580 and enabling secure boot

Install Windows Server 2012 R2x64 using a standard SA OS Provisioning build plan (ProLiant OS - Windows 2012 R2 Standard x64 Scripted Install) on a server that has UEFI Secure Boot disabled.
Enable Secure Boot from the server’s System Utilities Menu (see Enabling/Disabling UEFI Secure Boot).
Reboot the server into Secure Boot mode.

Enabling/disabling UEFI secure boot

Enabling/disabling UEFI Secure Boot requires manual changes using the device’s ROM firmware or using iLO.

To enable/disable UEFI Secure Boot, perform the following tasks:

Boot the server and access the System Utilities Menu by pressing F9.

Select System Configuration from the Options menu.
Select BIOS/Platform Configuration (RBSU) from the Options menu.
Select Server Security from the Options menu.
Select Secure Boot Configuration from the Options menu.

Press Enter to enable or disable (toggle) UEFI Secure Boot.

Provisioning a non-ProLiant UEFI capable server and enabling secure boot

See the Server Automation Use section for information about provisioning a non-ProLiant UEFI capable server and running Build Plans.

See your hardware vendor’s documentation for information about enabling secure boot after deployment in non-secure mode.

Send Help Center feedback