A technician just finished building a new PC and needs to install a firmware update for the system board UEFI . The technician is experiencing issues…

Secure Boot is a UEFI security standard that ensures a device boots using only software trusted by the Original Equipment Manufacturer (OEM). It prevents unauthorized operating systems and software, such as rootkits, from loading during the boot process by verifying digital signatures. A firmware update utility on a USB key may not have a recognized digital signature, causing Secure Boot to block it from running. Disabling Secure Boot temporarily is a common and necessary step to allow the system to access and execute the unsigned utility from the USB drive to perform the firmware update.

A. TPM security: The Trusted Platform Module (TPM) is a hardware-based security chip used for cryptographic functions and secure key storage; it does not directly block the execution of a firmware update from a USB drive.

B. USB 3.0 support: Disabling USB 3.0 support is a troubleshooting step for compatibility issues with older USB 2.0 devices, not a security feature that would prevent access for a firmware update.

C. PXE boot capability: The Preboot Execution Environment (PXE) is used for booting a computer from a network interface. Disabling it has no effect on the system's ability to access a local USB drive.

---

1. Microsoft Corporation. (2023). Disabling Secure Boot. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/windows-hardware/manufacture/desktop/disabling-secure-boot. This document states

"Secure Boot... helps to make sure that your PC boots using only firmware that is trusted by the manufacturer... You might have to disable Secure Boot to run some PC graphics cards

hardware

or operating systems such as Linux or previous version of Windows." This principle extends to unsigned firmware update utilities.

2. Intel Corporation. (2023). Intel® Platform Innovation Framework for EFI: UEFI Specification Version 2.10. UEFI Forum. Section 32.1

"Overview

" describes Secure Boot's role in authenticating code executed in the boot process. It authenticates images before execution

and an unsigned flashing utility would fail this authentication.

3. University of Michigan. (n.d.). Secure Boot and Your Computer. Safe Computing - University of Michigan. Retrieved from https://safecomputing.umich.edu/be-aware/personal-devices/secure-boot. The documentation explains

"Secure Boot is a security standard... to ensure that a device boots using only software that is trusted... It may be necessary to disable Secure Boot to boot from a CD/DVD or USB drive."