Skip to main content

14.8.6 Range of Verified Boot Support


14.8.6 Range of Verified Boot Support
Verified Boot on Guest Domains and Kernel Zones
Verified boot is supported only for global zones in Oracle Solaris 11.2. In addition to this, verified boot is supported for kernel zones in Oracle Solaris 11.3 or later. For details on configuring verified boot in kernel zones, see the Creating and Using Oracle Solaris Kernel Zones. For details on configuring verified boot in guest domains, see "Using Verified Boot" in the Oracle VM Server for SPARC 3.4 Administration Guide.
Boot Device and Verified Boot Policy Settings
The verified boot supports booting from a hard disk drive (HDD) and booting from the network. For other boot methods, set the verified boot policy to "none."
Also, when performing verified boot, be sure to perform boot from a signed device. Otherwise, boot verification by verified boot fails.
Table 14-22 shows the range of verified boot support.
Table 14-22  Range of verified boot support
  Control Domain Guest Domain
  Global Zone Kernel Zone Global Zone Kernel Zone
Boot from HDD Oracle Solaris 11.2 or later (*1)
XCP 2250 or later
Oracle Solaris 11.3 or later
XCP 2250 or later
Control domain:
Oracle Solaris 11.4 or later
Oracle Solaris 11.3 SRU11.3.8.7.0 or later
Guest domain: Oracle
Solaris 11.2 or later
XCP 2280 or later
Oracle Solaris 11.3 or later
XCP 2250 or later
Boot from network Oracle Solaris 11.2 or later (*1)
XCP 2320 or later
- Control domain:
Oracle Solaris 11.4 or later
Oracle Solaris 11.3 SRU11.3.8.7.0 or later
Guest domain: Oracle
Solaris 11.2 or later
XCP 2320 or later
-
  *1 Settings in the XSCF are used, and settings in Oracle Solaris are ignored.