topic Re: Secure Boot with Simplivity? in HPE SimpliVity

Secure Boot with Simplivity?

egoqed — Thu, 21 Jul 2022 04:44:26 GMT

Quick question: Does anybody know if Secure Boot is supportet with 4.1.1u1 and ESXi 7.0.x and VCSA 7.0.x?

Did not found something against...except the entires in the release notes but that only mentions 6.7....so kind of unsure if with starting of 7 this is all ok?

thanks

egoqed

Re: Secure Boot with Simplivity?

Mahesh202 — Wed, 20 Jul 2022 15:34:12 GMT

Hi egoqed

Hope you are doing well,

The answer is "Yes" it is supported as per the following compatibility guide:

https://www.vmware.com/resources/compatibility/detail.php?deviceCategory=server&productid=45042

Hope this helps.!!

Regards
Mahesh.

Re: Secure Boot with Simplivity?

Sunitha_Mod — Thu, 25 Aug 2022 09:59:28 GMT

Hello @egoqed,

We do see you have marked the reply as solved. We are happy to know your concern has been addressed.

Re: Secure Boot with Simplivity?

SudhakarP10 — Thu, 08 Jun 2023 00:11:59 GMT

Secure boot is not supported on SimpliVity, Do not enable secure boot because it is not supported on HPE OmniStackhosts with any ESXi version.

Re: Secure Boot with Simplivity?

hpe4servers — Mon, 10 Jul 2023 09:24:36 GMT

In the HPE SimpliVity OmniStack Interoperability Guide 4.2.0 stands Secure boot is not supported on HPE OmniStack hosts.
So is it planned in future releases?
Because we think it will be an improvement and in then we don't have to ignore Secure Boot in the Security Dashboard.

Best regards

Re: Secure Boot with Simplivity?

DCARTER2 — Fri, 14 Jun 2024 14:00:57 GMT

HPE SimpliVity OmniStack Interoperability Guide 5.0.0 seems to have dropped this caveat, it no longer defines Secure Boot as not supported

Re: Secure Boot with Simplivity?

Kipp_Glover — Mon, 17 Jun 2024 18:56:42 GMT

Please see this Customer Notice for information about Secure Boot on SimpliVity. https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-a00138243en_us

Secure Boot is planned for a future version of SimpliVity.

/Kipp

Re: Secure Boot with Simplivity?

SudhakarP10 — Tue, 18 Jun 2024 00:53:50 GMT

Secure boot supported at VM level on SimpliVity with minimal loss of deduplication and compression.

Secure Boot at the ESXi level is not supported at this time.

Re: Secure Boot with Simplivity?

egoqed — Tue, 25 Jun 2024 07:28:34 GMT

Thank you for your answers @Kipp_Glover @SudhakarP10

Really appreciate it.

Well, i'll then looking forward to the new version.

We will patch our 80 sys in a few weeks to the newest version.

Re: Secure Boot with Simplivity?

egoqed — Thu, 09 Jan 2025 15:06:56 GMT

Hey all

I know it is an old post but as with the recent 5.2. it seems that secure boot is supported now.

Already any expirience with it ?

Can it be activated whithout any concerns?

best regards

egoQED

Re: Secure Boot with Simplivity?

Sanika — Thu, 16 Jan 2025 10:28:17 GMT

Yes, Secure boot can be enabled on any node that is deployed with HPE OmniStack 5.2.0 or on any node that is upgraded to HPE OmniStack 5.2.0 or higher.

Please see the Customer Notice for information about Secure Boot on SimpliVity: https://support.hpe.com/hpesc/public/docDisplay?docId=a00144458en_us

Also, for more information, you may refer to UEFI Secure Boot for ESXi hosts in the HPE OmniStack 5.2.0 for vSphere Administration Guide.
https://support.hpe.com/hpesc/public/docDisplay?docId=sd00005173en_us&docLocale=en_US

Regards,
Sanika.

Re: Secure Boot with Simplivity?

Convergo — Wed, 12 Mar 2025 12:46:18 GMT

Is it correct that TPM 2.0 should be enabled / configured on the HPE SimpliVity host ? We notice some models have no TPM module, and like to know it this is "upgradable" to use secureboot.

Re: Secure Boot with Simplivity?

egoqed — Wed, 12 Mar 2025 13:00:42 GMT

It is not a must. You are free to do it.
Jep also have some where we did not buy the TPM modul on purpose as it was not supported anyway...

you can order the part from HPE, as you HPE partner.

a ext. technician had to install it as we were "not allowed" to do it. probably to make sure the part goes where it belongs to

Re: Secure Boot with Simplivity?

Sanika — Thu, 13 Mar 2025 06:34:50 GMT

Hi @Convergo

Yes, enabling and configuring TPM 2.0 is generally recommended for HPE SimpliVity hosts, especially if you plan to use features like Secure Boot. Secure Boot relies on TPM 2.0 to ensure platform integrity and securely store cryptographic keys.

However, I think it is not a strict requirement for HPE SimpliVity itself unless you specifically need Secure Boot.

For models without a TPM module, it may be possible to upgrade by installing a compatible TPM 2.0 module if supported by the hardware.

Regards,
Sanika.

If you feel this was helpful, please click the KUDOS thumb below. Also consider marking this as an "Accepted Solution", if the post has helped to solve your issue.