Unable to change secure boot configuration with ASU utility

Troubleshooting

Problem

When the following ASU command is run to change the Secure Boot Configuration in Unified Extensible Firmware Interface (UEFI), the command fails: asu64.exe set SecureBootConfiguration.SecureBootis Enabled --host w.x.y.z --user USERID --password PASSW0RD The displayed results of the command is: Lenovo Advanced Settings Utility version 10.0.87F Licensed Materials - Property of Lenovo (C) Copyright Lenovo Corp. 2007-2014 All Rights Reserved Connected to IMM at IP address w.x.y.z Failed to set SecureBootConfiguration.SecureBootis. Setting is readonly. UEFI versions/builds affected, by Machine Type (MT): x3850/x3950 X6 MT: 6241 UEFI version 1.00 (build ID: a9e122x) and prior x280, x480, x880 X6 MT: 7196, 4259 UEFI version 1.00 (build ID: n3e122x) and prior

Resolving The Problem

Source

RETAIN tip: H214783

Symptom

When the following ASU command is run to change the Secure Boot Configuration in Unified Extensible Firmware Interface (UEFI), the command fails:

	asu64.exe set SecureBootConfiguration.SecureBootis Enabled --host w.x.y.z --user USERID --password PASSW0RD

The displayed results of the command is:

	Lenovo Advanced Settings Utility version 10.0.87F Licensed Materials - Property of Lenovo (C) Copyright Lenovo Corp. 2007-2014 All Rights Reserved Connected to IMM at IP address w.x.y.z Failed to set SecureBootConfiguration.SecureBootis. Setting is readonly. UEFI versions/builds affected, by Machine Type (MT): x3850/x3950 X6 MT: 6241 UEFI version 1.00 (build ID: a9e122x) and prior x280, x480, x880 X6 MT: 7196, 4259 UEFI version 1.00 (build ID: n3e122x) and prior

Affected configurations

The system can be any of the following servers:

Flex System x280 Compute Node, type 7196, any model
Flex System x480 Compute Node, type 4258, any model
Flex System x480 Compute Node, type 7196, any model
Flex System x880 Compute Node, type 4258, any model
Flex System x880 Compute Node, type 7196, any model
System x3850 X6, type 6241, any model

This tip is not software specific.

This tip is not option specific.

Solution

This behavior will be corrected in a future release of UEFI firmware.

The target date for this release is fourth quarter 2015.

The file will be available by selecting the appropriate Product Group, type of System, Product name, Product machine type, and Operating system on IBM Support's Fix Central web page, at the following URL:

http://www.ibm.com/support/fixcentral/

Workaround

Users will need to use the Unified Extensible Firmware Interface (UEFI) F1 Setup Menu to enable UEFI Secure Boot:

System Setup -> Security -> Secure Boot

Additional information

To read the Secure Boot value from ASU, issue this command:

	asu64.exe show SecureBootConfiguration --host w.x.y.z --user USERID --password passw0rd

Document Location

Worldwide

Operating System

Lenovo x86 servers:Operating system independent / None

[{"Type":"HW","Business Unit":{"code":"BU016","label":"Multiple Vendor Support"},"Product":{"code":"QUOFMOD","label":"Lenovo x86 servers->Lenovo System x3850 X6->6241"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Line of Business":{"code":"","label":""}},{"Type":"HW","Business Unit":{"code":"BU016","label":"Multiple Vendor Support"},"Product":{"code":"QUOFMPI","label":"Lenovo x86 servers->Lenovo x480 X6 Compute Node->7196"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Line of Business":{"code":"","label":""}},{"Type":"HW","Business Unit":{"code":"BU016","label":"Multiple Vendor Support"},"Product":{"code":"QUOFMPK","label":"Lenovo x86 servers->Lenovo x280 X6 Compute Node->7196"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Line of Business":{"code":"","label":""}},{"Type":"HW","Business Unit":{"code":"BU016","label":"Multiple Vendor Support"},"Product":{"code":"QUOFNB5","label":"Lenovo x86 servers->Lenovo x880 X6 Compute Node->7196"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Line of Business":{"code":"","label":""}},{"Type":"HW","Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"QUOFNJ1","label":"Lenovo x86 servers->Lenovo x480 X6 Compute Node->4258"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Line of Business":{"code":"","label":""}},{"Type":"HW","Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"QUOFNJ3","label":"Lenovo x86 servers->Lenovo x880 X6 Compute Node->4258"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Line of Business":{"code":"","label":""}}]

Tips

Unable to change secure boot configuration with ASU utility - Lenovo Servers