Secure Boot with Simplivity?

[egoqed]

Hi

Quick question: Does anybody know if Secure Boot is supportet with 4.1.1u1 and ESXi 7.0.x and VCSA 7.0.x?

Did not found something against...except the entires in the release notes but that only mentions 6.7....so kind of unsure if with starting of 7 this is all ok?

thanks

egoqed

[Mahesh202 · Accepted solution]

Hi egoqed

Hope you are doing well, 

The answer is "Yes" it is supported as per the following compatibility guide:

https://www.vmware.com/resources/compatibility/detail.php?deviceCategory=server&productid=45042

Hope this helps.!!

Regards
Mahesh.

[Sunitha_Mod]

Hello @egoqed, 

We do see you have marked the reply as solved. We are happy to know your concern has been addressed.

[SudhakarP10]

Secure boot is not supported on  SimpliVity, Do not enable secure boot because it is not supported on HPE OmniStackhosts with any ESXi version.

[hpe4servers]

Hi

In the HPE SimpliVity OmniStack Interoperability Guide 4.2.0 stands Secure boot is not supported on HPE OmniStack hosts.
So is it planned in future releases?
Because we think it will  be an improvement and in then we don't have to ignore Secure Boot in the Security Dashboard.

Best regards

[DCARTER2]

HPE SimpliVity OmniStack Interoperability Guide 5.0.0 seems to have dropped this caveat, it no longer defines Secure Boot as not supported

[Kipp_Glover]

Please see this Customer Notice for information about Secure Boot on SimpliVity.   https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-a00138243en_us

Secure Boot is planned for a future version of SimpliVity. 

/Kipp

[SudhakarP10]

Secure boot  supported at VM level on SimpliVity with minimal loss of deduplication and compression. 

Secure Boot at the ESXi level is not supported at this time.

[egoqed]

Thank you for your answers  @Kipp_Glover @SudhakarP10 

Really appreciate it.

Well, i'll then looking forward to the new version.

We will patch our 80 sys in a few weeks to the newest version.

[egoqed]

Hey all 

I know it is an old post but as with the recent 5.2. it seems that secure boot is supported now.

Already any expirience with it ?

Can it be activated whithout any concerns? 

best regards

egoQED

[Sanika]

Yes, Secure boot can be enabled on any node that is deployed with HPE OmniStack 5.2.0 or on any node that is upgraded to HPE OmniStack 5.2.0 or higher.

Please see the Customer Notice for information about Secure Boot on SimpliVity: https://support.hpe.com/hpesc/public/docDisplay?docId=a00144458en_us

Also, for more information, you may refer to UEFI Secure Boot for ESXi hosts in the HPE OmniStack 5.2.0 for vSphere Administration Guide.
https://support.hpe.com/hpesc/public/docDisplay?docId=sd00005173en_us&docLocale=en_US

Regards,
Sanika.

[Convergo]

Is it correct that TPM 2.0 should be enabled / configured on the HPE SimpliVity host ? We notice some models have no TPM module, and like to know it this is "upgradable" to use secureboot.

[egoqed]

It is not a must. You are free to do it.
Jep also have some where we did not buy the TPM modul on purpose as it was not supported anyway...

you can order the part from HPE, as you HPE partner.

a ext. technician had to install it as we were "not allowed" to do it. probably to make sure the part goes where it belongs to

[Sanika]

Hi @Convergo 

Yes, enabling and configuring TPM 2.0 is generally recommended for HPE SimpliVity hosts, especially if you plan to use features like Secure Boot. Secure Boot relies on TPM 2.0 to ensure platform integrity and securely store cryptographic keys. 

However, I think it is not a strict requirement for HPE SimpliVity itself unless you specifically need Secure Boot.

For models without a TPM module, it may be possible to upgrade by installing a compatible TPM 2.0 module if supported by the hardware.

Regards,
Sanika.

If you feel this was helpful, please click the KUDOS thumb below. Also consider marking this as an "Accepted Solution", if the post has helped to solve your issue.