Integrated Dell Remote Access Controller 9 Attribute Registry

BIOS.SysSecurity.SecureBoot (Read or Write)

Description

Allows enabling of Secure Boot, where the BIOS authenticates each component that is executed during the boot process using the certificates in the Secure Boot Policy. The following components are validated in the boot process: - UEFI drivers that are loaded from PCIe cards - UEFI drivers and executables from mass storage devices - Operating system boot loaders Note: Secure Boot is not available unless the Boot Mode (in the Boot Settings menu) is set to UEFI. Note: Secure Boot is not available unless the Load Legacy Video Option ROM setting (in the Miscellaneous Settings menu) is disabled. Note: You should create a setup password if you enable Secure Boot.

When the value of SecureBootMode is DeployedMode AND the value of SecureBoot is Enabled, BIOS will append a ProgReadOnlyLocal modifier to SecureBoot, SecureBootPolicy, and SecureBootMode. This means that inband system management tools will not allow users to change these attributes when these conditions are true.

Legal Values

• Enabled
• Disabled

Default Value

Not Applicable

Write Privilege

Server Control

License Required

iDRAC Express or iDRAC Enterprise

Dependency

Not applicable