Enabling UEFI Secure Boot in UD2-LX 40
Prerequisites
IGEL OS 10.04.100 or higher
BIOS BayTrail.5.04.32.0022 or higher
To check the BIOS version, open the InsydeH20 Setup Utility as described below (step 3). Press [F9] to open the System Information window. In the System Information window, check that the BIOS version corresponds to BayTrail.5.04.32.0022 or higher. For more information, see Hardware > Versions of Hardware > (1-en) Hardware > (1-en) Hardware FAQs > (1-en) How Can I Update the BIOS Version?
It is crucial to set a BIOS password to prevent users from disabling Secure Boot.
Changing the Device's Boot Type to UEFI Boot
Turn on (or restart) the IGEL device.
During boot, hold the [F2] key until you see the menu shown below.
Using the arrow keys, move to the option SCU and press [ENTER]. This will open the InsydeH20 Setup Utility.
Using the arrow keys, move to the Boot tab. Ýou will find Boot Type set to <Dual Boot Type>.
Change Boot Type to <UEFI Boot Type>.
Boot Type is now set to <UEFI Boot Type>.
Save the changes. To do this, press [F10] and confirm "Exit Saving Changes?" with [Yes].
The settings are now saved and the device is rebooted.
Activating the Secure Boot Feature
Turn on (or restart) the IGEL device.
During boot, hold the [F2] key until you see the menu shown below.
Using the arrow keys, navigate to the option Secure Boot Option and press [ENTER].
The screen Administer Secure Boot will open.
In the screen Administer Secure Boot, you will find "Erase all Secure Boot Settings" and "Restore Secure Boot to Factory Settings" set to <Disabled>.
Change "Erase all Secure Boot Settings" and "Restore Secure Boot to Factory Settings" to <Enabled>.
If "Enforce Secure Boot" is not grayed out as in the picture below, change that option to as well.
Save the changes. To do this, press [F10] and confirm Exit Saving Changes? with [Yes].
The changes are now saved and the device is rebooted.As a last step, verify that Secure Boot is working, see Veryfing that UEFI Secure Boot is enabled.