In this video, we will show you how to enable Secure boot on VMware ESXi 6.5, for Dell EMC’s 14th generation of PowerEdge systems.
Before you begin, you must ensure that you have downloaded the latest BIOS available at Dell.com/support.
UEFI Secure Boot is a technology where the system firmware checks that the system boot loader signed with a cryptographic key, authorized by a database contained in the system firmware.
This feature ensure that the proper Signature verification happens in the next stage, which includes Boot loader, Kernel and user space, and also prevents any execution of unsigned code.
To begin the process, turn on the system.
Press F2 to go to the System Setup page.
Click System BIOS, and then Boot Settings.
The Boot Mode option is selected as UEFI, by default.
Click UEFI Boot settings, and then click UEFI Boot Sequence.
You must ensure that Internal SD EFI Fixed Disk Boot Device 1 appears first in the list.
Then, click OK.
Click Back until you can view the System BIOS Settings page.
Click System Security.
By default, the Secure Boot Policy option is set as Standard and the Secure Boot Mode option is set as Deployed Mode.
Enable the Secure Boot option.
In the Saving Changes dialog box, click OK to set the Setup Password.
Enter Setup password, and click OK.
Reenter the password to confirm, and then click OK.
Click Back.
Click Finish, and then click Yes in the Saving Changes dialog box.
Then, click OK on the success message.
To exit from System Setup, click Finish, and then click Yes on the confirm exit message.
The system restarts automatically.
The system displays the Loading with ESXi installer screen.
The system loads the VMware Hypervisor and displays the UEFI Secure Boot in progress message.
Note that this operation might take a while.
After successfully booting in to ESXi, you can view the VMware ESXi version and Dell PowerEdge model number on the Direct Console User Interface screen.
You can now log in to ESXi.
Press F2 to view the Authentication Required window.
Type the login and password details and press Enter to continue.
Then, press F2 to view the System Customization window.
To view the various troubleshooting modes, select Troubleshooting Options.
By default, the ESXi shell option is disabled, press Enter to enable this option.
Press Alt F1 to go to the ESXi command line shell.
Enter the login and password details, and press Enter.
To view the help enter /usr/lib/vmware/secureboot/bin/secureBoot.py -h and then press Enter.
To check to see if the host is ready to enable secure boot use the same command but this time -c instead and then press Enter.
To check to see if UEFI Secure Boot is enabled, again the same command but this time -s and then press Enter.
After these commands are executed, if the output displays that Secure Boot is enabled then your system is protected with UEFI Secure Boot.
For more information, go to www.delltechcenter.com/os