Dell PowerEdge R210 II Firmware Upgrade

Signed BIOS Firmware Update

Important Information

This document provides information on the Signed BIOS update feature

supported on the following Dell PowerEdge systems:

NOTE:

By default, the Signed BIOS update feature is enabled on the 12th generation

PowerEdge systems.

Signed BIOS Update Firmware Feature

Signed BIOS update is a feature with digital signature that is authenticated by a

public key and has a built-in feature to prevent unauthorized BIOS

modifications. These BIOSes are designed and implemented as outlined by the

National Institute of Standards and Technology (NIST) under the BIOS

Protection Guidelines known as

Special Publication 800-147

.

Signed BIOS update provides enhanced protection features like authentication

updates, firmware locking, and non-bypassability.

By default, this option is disabled in the BIOS settings. Once enabled, this feature

cannot be disabled and back-flash to a non-NIST compliant BIOS is also not allowed.

Table 1 lists the minimum BIOS version that supports the Signed BIOS update

feature on the respective PowerEdge systems.

Table 1.

BIOS Versions That Support The Signed BIOS Update Feature

PowerEdge System

BIOS Version

R910

2.8.2

R210 II

2.2.3

T110 II

2.2.3

2012 - 12