ESXi

 View Only

  • 1.  Secure Boot

    Posted Aug 12, 2021 11:21 AM

    I have an HP Proliant DL360 Gen9 running 7 U1, I have recently installed a TPM chip and I would like to configure secure boot.

    After running the verification script (/usr/lib/vmware/secureboot/bin/secureBoot.py -c) my output is:

    "Secure boot CANNOT be enabled: Failed to verify signatures of the following vib(s): [hpnmi]. All tardisks validated. All acceptance levels validated"

     

    Not sure how to correct this.

     

    Thanks



  • 2.  RE: Secure Boot

    Posted May 08, 2022 08:01 PM

    The only solution is to update the VIB to one that is digitally signed by the vendor.

    Tips, KB articles, etc posted here:

    https://communities.vmware.com/t5/vSphere-Hypervisor-Discussions/ESXi-PSOD-using-secure-boot/m-p/2907887#M7025



  • 3.  RE: Secure Boot

    Posted May 17, 2022 11:44 AM

    Hi  

    - SSH to you host

    - esxcli software vib remove -n hpnmi

    - Reboot host

    Install newest VMware and HPE patches. The hpnmi vib should be installed automatically again. If not you can download and winscp it to the host and install with "esxcli software vib install -v /tmp/%yourvib%

    Regards

    Daniel



  • 4.  RE: Secure Boot

    Posted May 17, 2022 01:40 PM

    Thanks for sharing.