User guide

Signed BIOS Firmware Update
Important Information
This document provides information on the Signed BIOS update feature
supported on the following Dell PowerEdge systems:
• R910
• R210 II
• T110 II
NOTE: By default, the Signed BIOS update feature is enabled on the 12th generation
PowerEdge systems.
Signed BIOS Update Firmware Feature
Signed BIOS update is a feature with digital signature that is authenticated by a
public key and has a built-in feature to prevent unauthorized BIOS
modifications. These BIOSes are designed and implemented as outlined by the
National Institute of Standards and Technology (NIST) under the BIOS
Protection Guidelines known as Special Publication 800-147.
Signed BIOS update provides enhanced protection features like authentication
updates, firmware locking, and non-bypassability.
By default, this option is disabled in the BIOS settings. Once enabled, this feature
cannot be disabled and back-flash to a non-NIST compliant BIOS is also not allowed.
Table 1 lists the minimum BIOS version that supports the Signed BIOS update
feature on the respective PowerEdge systems.
Table 1. BIOS Versions That Support The Signed BIOS Update Feature
PowerEdge System BIOS Version
R910 2.8.2
R210 II 2.2.3
T110 II 2.2.3
2012 - 12