Poweredge T20 Secure Boot with Windows Server 2016

Question

I'm having issues with Secure boot on a Power Edge T20 but only when running Windows Server 2016.

I'm trying to figure out if this is a BIOS issue or a hardware issue or if anyone else is experiencing it.

BIOS: A02-A12

Boot Type: UEFI with Secure Boot Enabled

OS: Windows Server 2016 Standard (verified ISO)

Basically what happens is the server will not reboot it only hangs before reboot. When it goes to reboot. It sits at a black screen indefinitely. It does not get to the Dell BIOS Logo. It even gets as far as turning off USB devices like the keyboard. It will do a full shutdown though without issue. This actually happens even during OS install. The first reboot it during the install it hangs. If I turn off secure boot it works fine.

If I use Windows Server 2012 R2 with secure boot enabled it works fine as well.

I have tried it will all the published BIOS versions for the T20 and can reproduce it even on A12.

To reproduce: Set bios to defaults. Make sure Secure boot is enabled for UEFI. Try to reboot Windows Server 2016.

The Dell Poweredge T20 is certified for Windows Server 2016 as of BIOS A09.

SpRoUsA · Accepted Answer

This issue appears to have been resolved in BIOS version A16.

Daniel My · Answer

Hello

Have you tested this on multiple T20's or just the one?

What is your storage configuration? Do you have the add-on controller, what is the SATA mode, what model drives are you using, what firmware revision are the drives on? Also, are you using IRST for RAID or are the drives just being passed through to the OS?

Have you performed all available OS updates and tested?

Was secure boot enabled prior to the OS install?

Are there any other devices attached to the system? USB peripherals can cause issues with system boot or device initialization. Remove USB storage devices and all unnecessary hardware for testing. Also, test with another keyboard if possible.

Thanks

SpRoUsA · Answer

Currently only one T20.

Storage: On board SATA

Mode: AHCI tested only

Type: SSD or HDD (both have the same issue also tried different sata cables)

Firmware: All drives are on the latest available firmware

I can reproduce it whether the OS is being installed or already installed. It doesn't matter if its fresh 2016 or the 1709 version that is fully patched.

It happens with USB devices attached or no usb devices attached(including keyboard).

Please remember I'm not talking about bitlocker just secure boot.

Daniel My · Answer

We were unable to reproduce this issue. While attempting to reproduce the issue we noticed that the "Enable Legacy Option ROMs" setting was not blocked when secure boot is enabled. This option will cause issues if secure boot is enabled. Please make sure the legacy ROM option is disabled.

If that option is already disabled then please provide more information about your configuration. Something about your configuration is not the same as the T20 we have in the lab. I would also recommend clearing NVRAM on the system and testing again.

Thanks

CChaffin · Answer

Hi Daniel,

I'm really at a loss and pretty up in arms as we too are experiencing a similar issue. However, we have multiple T20's all on older A06 and from what I can tell, correct me if I am wrong but A12 is/was the latest released version?

What is alarming is that either with or without the use of our service tags in support, all other drivers remain available but now ZERO BIOS downloads are available for the ENTIRE T20 line of servers - which certainly must be an error that appears to be very recent since this post I am replying to (with a similar black screen boot issue here) was just posted referring to what sure seemed to be the FULLY AVAILABLE BIOS version A12 that the OP states also having a black boot screen issue.

So unless I'm missing something, in the last 2 weeks someone at Dell very erroneously removed ALL BIOS (new and even old for emergency purposes) - and I'm posting here to hopefully have you help get that resolved quickly (or at least let me know how I can privately get a copy of the newest BIOS whether A12 or newer).

Thanks!

Collin

SpRoUsA · Answer

Correct, A12 was the latest and current BIOS as of the posting. I concur, I am also seeing all BIOS versions have been removed from download for the T20 on Dell's support site. I would send you the link to the A12 BIOS file but it actually has been removed..

"404 - File or directory not found.
The resource you are looking for might have been removed, had its name changed, or is temporarily unavailable."

SpRoUsA · Answer

Enable Legacy Option ROMs is disabled and I have cleared the NVRAM previously during testing without being able to resolve the black screen reboot issue.

Daniel My · Answer

The T20 BIOS updates were pulled. They should be available again.

Test again with the latest BIOS that was just released. If you still experience the issue then please send me a friend request with the system service tag in the comment. Also, please reply with the version of 2016 you are using and where you are getting it from. If there are any changes that have been made to the system configuration then I need to know that as well. If you have any hardware attached to the system that is not part of the original configuration then please list it.

Thanks

SpRoUsA · Answer

A14 BIOS - Issue persists

Process is as follows:

Install A14 BIOS
Upon Reboot enter BIOS and "Load Defaults"
Change SATA type to AHCI and enable UEFI PXE Boot Stack.
Reboot and install OS(In my case from a WDS server).
Upon reboot after "installing devices" black screen.

I'm using ISO files downloaded directly from Microsoft and verified by hash before deployment to the WDS server. The original release of 2016 all the way to current version of 1709 which all have the same issue.

CPU/RAM/HDD are the only items installed in the system.

Xeon 1246v3

32GB DDR3 ECC RAM

Included HDD or an SSD for storage.

PowerEdge Hardware General

Poweredge T20 Secure Boot with Windows Server 2016

Was this post helpful?