beautypg.com

Dell PowerEdge R210 II User Manual

Signed bios firmware update, Important information, Signed bios update firmware feature

background image

Signed BIOS Firmware Update

Important Information

This document provides information on the Signed BIOS update feature
supported on the following Dell PowerEdge systems:

R910

R210 II

T110 II

NOTE:

By default, the Signed BIOS update feature is enabled on the 12th generation

PowerEdge systems.

Signed BIOS Update Firmware Feature

Signed BIOS update is a feature with digital signature that is authenticated by a
public key and has a built-in feature to prevent unauthorized BIOS
modifications. These BIOSes are designed and implemented as outlined by the
National Institute of Standards and Technology (NIST) under the BIOS
Protection Guidelines known as

Special Publication 800-147.

Signed BIOS update provides enhanced protection features like authentication
updates, firmware locking, and non-bypassability.

By default, this option is disabled in the BIOS settings. Once enabled, this feature

cannot be disabled and back-flash to a non-NIST compliant BIOS is also not allowed.

Table 1 lists the minimum BIOS version that supports the Signed BIOS update
feature on the respective PowerEdge systems.

Table 1.

BIOS Versions That Support The Signed BIOS Update Feature

PowerEdge System

BIOS Version

R910 2.8.2

R210 II

2.2.3

T110 II

2.2.3

2012 - 12

Table of contents