Secure boot (SB) is a security feature implemented in modern computer systems to ensure the integrity and authenticity of the boot process. It is designed to prevent the execution of unauthorized or malicious software during system startup.
When SB is enabled, the system firmware, typically the unified extensible firmware interface (UEFI), verifies the digital signatures of the bootloader and the operating system kernel before allowing them to run. These digital signatures are generated by trusted entities, such as the PC manufacturer or operating system vendors, and indicate that the software components are genuine and have not been tampered with.
If the digital signatures are valid and match the trusted signatures stored in the firmware, the system proceeds with the boot process. However, if the signatures are invalid or missing, a secure boot prevents the execution of the software, alerting the user or administrator to a potential security threat.
By enforcing the use of trusted software, secure boot helps protect the system against rootkits, bootkits, and other forms of malware that attempt to hijack the boot process and gain control over the system. It establishes a chain of trust from the firmware to the operating system, enhancing the overall security of the computer system.
For NativeEdge-enabled hardware, this means that only Dell-signed firmware can execute on the supported platforms.
![Secured component verification](/static/media/9198938f-8c47-5a0e-82d9-6db6a62cd3f7/DAM-b09bb69a-e771-4560-8b30-a28ab48636be/out/4_2=GUID-47027B0C-6B3F-49C0-BF18-E2AAC0B50262=1=en-us=Low.png)