14.8.6 Range of Verified Boot Support
14.8.6 Range of Verified Boot Support
Verified Boot on Guest Domains and Kernel Zones
Verified boot is supported only for global zones in Oracle Solaris 11.2. In addition to this, verified boot is supported for kernel zones in Oracle Solaris 11.3 or later. For details on configuring verified boot in kernel zones, see the Creating and Using Oracle Solaris Kernel Zones. For details on configuring verified boot in guest domains, see "Using Verified Boot" in the Oracle VM Server for SPARC 3.4 Administration Guide.
Boot Device and Verified Boot Policy Settings
The verified boot supports booting from a hard disk drive (HDD) and booting from the network. For other boot methods, set the verified boot policy to "none."
Also, when performing verified boot, be sure to perform boot from a signed device. Otherwise, boot verification by verified boot fails.
Table 14-22 shows the range of verified boot support.
Control Domain | Guest Domain | |||
---|---|---|---|---|
Global Zone | Kernel Zone | Global Zone | Kernel Zone | |
Boot from HDD | Oracle Solaris 11.2 or later (*1) XCP 2250 or later |
Oracle Solaris 11.3 or later XCP 2250 or later |
Control domain: Oracle Solaris 11.4 or later Oracle Solaris 11.3 SRU11.3.8.7.0 or later Guest domain: Oracle Solaris 11.2 or later XCP 2280 or later |
Oracle Solaris 11.3 or later XCP 2250 or later |
Boot from network | Oracle Solaris 11.2 or later (*1) XCP 2320 or later |
- | Control domain: Oracle Solaris 11.4 or later Oracle Solaris 11.3 SRU11.3.8.7.0 or later Guest domain: Oracle Solaris 11.2 or later XCP 2320 or later |
- |
*1 Settings in the XSCF are used, and settings in Oracle Solaris are ignored. |
< Previous Page | Next Page >