Breadcrumbs

Enabling UEFI Secure Boot in UD6-LX 51

Prerequisites

  • IGEL OS 10.04.100 or higher

The version of IGEL OS can be found in the About window.

  • BIOS version 3.9. 13-02202017 or higher

To check the BIOS version, open the InsydeH20 Setup Utility as described below (step 3). Press [F9] to open the System Information window. In the System Information window, check that the BIOS version corresponds to 3.9. 13-02202017 or newer. For more information, see Hardware > Versions of Hardware > (1-en) Hardware > (1-en) Hardware FAQs > (1-en) How Can I Update the BIOS Version?.

It is crucial to set a BIOS password to prevent users from disabling Secure Boot.

Changing the Device's Boot Type to UEFI Boot

  1. Turn on (or restart) the IGEL device.

  2. During boot, hold the [DEL] key until you see the menu shown below.

  3. Using the arrow keys, navigate to the option SCU and press [ENTER]. This will open the InsydeH20 Setup Utility.

    16349.png

  4. Using the arrow keys, move to the Boot tab. Ýou will find Boot Type set to <Dual Boot Type>.

    16350.png


  1. Change Boot Type to <UEFI Boot Type>.

    16351.png


  1. Save the changes. To do this, press [F10] and confirm Exit Saving Changes? with [Yes].

    16353.png


    The changes will be saved and the device will be rebooted.

Activating the Secure Boot Feature

  1. Turn on (or restart) the device.

  2. During boot, hold the [DEL] key until you see the screen shown below.

  3. Using the arrow keys, move to the option Secure Boot Option, and press [ENTER]. This will open the the screen Administer Secure Boot.

    16344.png


  1. In the screen Administer Secure Boot, you will find "Erase all Secure Boot Settings" and "Restore Secure Boot to Factory Settings" set to <Disabled>.

    16345.png


  1. In the screen Administer Secure Boot, set "Erase all Secure Boot Settings" and "Restore Secure Boot to Factory Settings" to <Enabled>.

    16347.png


  1. "Erase all Secure Boot Settings" and "Restore Secure Boot to Factory Settings" are now set to <Enabled>.
    If "Enforce Secure Boot" is not grayed out as in the picture below, change that option to as well.

    16346.png


  1. Save the changes. To do this, press [F10 ]and confirm Exit Saving Changes? with [Yes].

    16348.png


    The changes will be saved and the device will be rebooted.

  2. As a last step, verify that Secure Boot is working, see Verifying that Secure Boot is Enabled.