HP Unified Extensible Firmware Interface - Manual (Page 69)

Figure 59 Server Security — F11 Boot Menu Prompt
Disabling Intelligent Provisioning (F10 Prompt)
This option disables the Intelligent Provisioning functionality. If this option is disabled, you are
prevented from entering the Intelligent Provisioning environment by pressing F10 during server
boot. Set this option to “Enabled” use the Intelligent Provisioning functionality.
To disable Intelligent Provisioning (F10 Prompt):
1.
From the System Utilities screen, select System Configuration
→BIOS/Platform Configuration
(RBSU)
→Server Security→Intelligent Provisioning (F10 Prompt) and press Enter.
2. Select one of the following options:
•
Enabled (default)
•
Disabled
3. Press F10 to save your selection.
4. The next time you reboot the server, F10 is disabled.
Configuring Secure Boot
Secure Boot is integrated in the UEFI specification on which the HP implementation of UEFI is based.
Secure Boot is completely implemented in the BIOS and does not require special hardware. It
ensures that each component launched during the boot process is digitally signed and that the
signature is validated against a set of trusted certificates embedded in the UEFI BIOS. Secure Boot
validates the software identity of the following components in the boot process:
•
UEFI drivers loaded from PCIe cards
•
UEFI drivers loaded from mass storage devices
•
Pre-boot UEFI shell applications
•
OS UEFI boot loaders
Once enabled, only firmware components and operating systems with boot loaders that have an
appropriate digital signature can execute during the boot process. Only operating systems that
support Secure Boot and have an EFI boot loader signed with one of the authorized keys can boot
when Secure Boot is enabled. For more information about supported operating systems, see the
Accessing the BIOS/Platform Configuration (RBSU) menu 69