Booting as a z/VM guest from a DASD in secure-boot mode

6.18 z/VM guest

Boot Linux™ in secure-boot mode with a DASD boot device. You can specify additional parameters with the IPL command.

Before you begin

You need a ECKD DASD boot device prepared with zipl. ECKD DASDs are supported as secure boot devices as of IBM z16 and LinuxONE 4.

Perform these steps to start the boot process:

Establish a CMS or CP session with the z/VM® guest virtual machine where you want to boot Linux.
Ensure that the boot device is accessible to your z/VM guest virtual machine.
Define the ECKD DASD as a secure boot device.
Issue a command of this form:
```
#cp set loaddev ECKD DEVICE <devno> secure
```
IPL from the ECKD DASD. Issue a command of this form:
```
#cp i <devno> clear parm <kernel_parameters>
```
where:

<devno>

specifies the device number of the boot device as seen by the guest.

parm <kernel_parameters>

is an optional 64-byte string of kernel parameters to be concatenated to the end of the existing kernel parameters used by your boot configuration.

To define an ECKD DASD 07e78 for secure boot, and boot from it, enter the following CP commands:

#cp set loaddev eckd device 7e78 secure
# cp i loaddev