- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello,
We have to provision a few hundred devices of NUC8CCHKRN with our own embedded linux operating system which in turn needs secure boot disabled.
Is there any way for us to automate this process of disabling secure boot in the bios before we can install our own operating system?
I already checked out the Aptio UEFI Firmware Integrator Tools but I couldn't find any documentation on how to further automate this process.
Our preferred solution would be a bootable usb stick which after booting automatically changes the BIOS UEFI Secure Boot setting.
Best Regards
Philipp
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi pfriedenberger,
Unfortunately, we don’t have a way to automate or provision BIOS on multiple devices, this is due to security reasons and for Secure Boot (enabled by default in BIOS) not even iSetupCFG tool is an option since it is restricted from modifying any value under the Secure Boot Page.
At this point, I would say that accessing the BIOS and manually configuring this setting is the only way we have available.
Regards,
Ronny G
Link Copied
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
pfriedenberger, Thank you for posting in the Intel® Communities Support.
In reference to this scenario, about the possibility of trying to automate the process of disabling secure boot in the BIOS before you can install your own operating system on the Intel® NUCs, we will do further research on this matter. As soon as I get any updates about this matter, I will post all the details on this thread.
Any questions, please let me know.
Regards,
Albert R.
Intel Customer Support Technician
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi pfriedenberger,
Unfortunately, we don’t have a way to automate or provision BIOS on multiple devices, this is due to security reasons and for Secure Boot (enabled by default in BIOS) not even iSetupCFG tool is an option since it is restricted from modifying any value under the Secure Boot Page.
At this point, I would say that accessing the BIOS and manually configuring this setting is the only way we have available.
Regards,
Ronny G
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Ronny G,
Thanks for taking the time to check if there are any other ways.
Regards,
Philipp

- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page