Winston: Created page with "=Input keys to BIOS= ==Requirment== Target Platform: UTX-3115 or ARK-2151S ... BIOS (Need support UEFI Shell ) ARK L510XF23 *USB Flash Drive A signed IDP bootable USB fla..."

2016-02-17T08:28:56Z

Created page with "=Input keys to BIOS= ==Requirment== *Target Platform: UTX-3115 or ARK-2151S ... *BIOS (Need support UEFI Shell ) ARK L510XF23 *USB Flash Drive A signed IDP bootable USB fla..."

New page

=Input keys to BIOS=
==Requirment==
*Target Platform:
UTX-3115 or ARK-2151S ...
*BIOS (Need support UEFI Shell )
ARK L510XF23
*USB Flash Drive
A signed IDP bootable USB flash drive

==Enroll key and certificates into UEFI==
1. Insert the signed IDP3.0 bootable USB flash drive into a USB port on the Target Device 
2. Apply power, press the power button, and then immediately press the '''Del''' key to enter the '''Boot Device Menu''' 
3. Select '''Enter Setup'''. 
4. Navigate to '''Boot''' > '''CSM parameters''' > '''Video'''. Select '''UEFI only'''. 
5. Press '''F4''', and select Yes to save changes and reboot. Immediately press the '''Del''' key to enter the '''Boot Device Menu'''. 
6. Navigate to the '''Boot''' > '''CSM parameters''' > '''CSM Support'''. Select '''Disabled'''. 
7. Press <F4>, and select Yes to save changes and reboot. Immediately press the '''Del''' key to enter the '''Boot Device Menu.''' 
8. Navigate to Security > Secure Boot Menu > Secure Boot. Select Disabled. 
9. Delete all secure boot variables. Navigate to '''Security''' > '''Secure Boot Menu''' > '''Secure Boot''' > '''Key Management'''. Select '''Delete All Secure Boot Variable''', and then select '''Yes'''. 
10. Press '''F4''', and select Yes to save changes and reboot. Immediately press the '''Del''' key to enter the '''Boot Device Menu'''. 
11. Select '''UEFI: Built-in EFI Shell'''. 
12. At the Shell> prompt, type fs0: to enter VFAT partition on the USB flash drive. 
13. At the fs0:\ prompt, type '''EFI\BOOT\BOOTIA64.efi''' to enroll the keys/certificates into the UEFI and lock down the BIOS. Create the KEK, db, and PK 

==Enable and Test Secure Boot==
1. Reboot the system and press the '''Del''' key to enter the '''Boot Device Menu'''. 
2. Navigate to '''Security''' > '''Secure Boot Menu''' > '''Secure Boot'''. Select '''Enable'''. 
3. Navigate to '''Boot Device Menu''' > '''UEFI: USB flash drive''' 
4. Press '''F4''', and select '''Yes''' to save changes and reboot. 
5. Verify the Signed USB flash drive can boot in IDP3.0 OS system successfully.

IDP/Secure Boot - Revision history

Winston: Created page with "=Input keys to BIOS= ==Requirment== *Target Platform: UTX-3115 or ARK-2151S ... *BIOS (Need support UEFI Shell ) ARK L510XF23 *USB Flash Drive A signed IDP bootable USB fla..."

Winston: Created page with "=Input keys to BIOS= ==Requirment== Target Platform: UTX-3115 or ARK-2151S ... BIOS (Need support UEFI Shell ) ARK L510XF23 *USB Flash Drive A signed IDP bootable USB fla..."