Chromeplated
Contributor
Contributor

Secure Boot

I have an HP Proliant DL360 Gen9 running 7 U1, I have recently installed a TPM chip and I would like to configure secure boot.

After running the verification script (/usr/lib/vmware/secureboot/bin/secureBoot.py -c) my output is:

"Secure boot CANNOT be enabled: Failed to verify signatures of the following vib(s): [hpnmi]. All tardisks validated. All acceptance levels validated"

 

Not sure how to correct this.

 

Thanks

0 Kudos
3 Replies
LabMasterBeta
Enthusiast
Enthusiast

The only solution is to update the VIB to one that is digitally signed by the vendor.

Tips, KB articles, etc posted here:

https://communities.vmware.com/t5/vSphere-Hypervisor-Discussions/ESXi-PSOD-using-secure-boot/m-p/290...

0 Kudos
stadi13
Hot Shot
Hot Shot

Hi @Chromeplated 

- SSH to you host

- esxcli software vib remove -n hpnmi

- Reboot host

Install newest VMware and HPE patches. The hpnmi vib should be installed automatically again. If not you can download and winscp it to the host and install with "esxcli software vib install -v /tmp/%yourvib%

Regards

Daniel

0 Kudos
anilspp
Enthusiast
Enthusiast

Thanks for sharing.

0 Kudos