Firmware (UEFI)

We provide a comprehensive list of vulnerabilities and remediation options on this page for our visitors’ reference. However, we would like to inform you that EireaNet, Inc. offers a free of charge automated mitigation service to our monthly subscribers. This service is designed to detect and remediate any vulnerabilities or other security issues on your system. Our mitigation service is constantly updated with the latest threats and vulnerabilities, ensuring that our subscribers are always protected against the latest security threats.

In addition to the automated mitigation service, EireaNet, Inc. also provides personalized consulting for businesses that require a more tailored approach to their security needs. Our team of experts can conduct thorough security assessments and provide customized recommendations to address specific vulnerabilities within your system. This personalized consulting service aims to empower businesses with the knowledge and tools to enhance their overall security posture and mitigate potential risks effectively.

We understand the critical importance of staying ahead of evolving security threats, which is why we remain dedicated to continuously updating our mitigation service and staying informed about emerging vulnerabilities. By offering both automated and personalized solutions, we aim to cater to the diverse security needs of our subscribers, ultimately contributing to a more secure digital environment for all.

Enable UEFI Secure Boot mode

Description

Secure Boot is a UEFI firmware security feature that ensures only immutable and signed software are loaded during the boot time. Secure Boot leverages digital signatures to validate the authenticity, source, and integrity of the code that is loaded.

Potential risk

Failure to enable UEFI Secure Boot mode leaves the system vulnerable to attacks that load malicious code as part of the boot sequence. Such successful attack may install rootkits and bootkits and bypass OS security mechanisms.

Remediation options

1. Uninstall any graphics cards, hardware, or operating systems that aren’t compatible with Secure Boot.
2. Open the PC BIOS menu:
   • You can often access this menu by pressing a key while your PC is booting, such as F1, F2, F12, or Esc.Or
   • From Windows, hold the Shift key while selecting Restart. Go to Troubleshoot > Advanced Options: UEFI Firmware Settings.
3. Find the Secure Boot setting, and if possible, set it to Enabled. This option is usually in either the Security tab, the Boot tab, or the Authentication tab.On some PCs, select Custom, and then load the Secure Boot keys that are built into the PC.If the PC doesn’t allow you to enable Secure Boot, try resetting the BIOS back to the factory settings.
4. Save changes and exit. The PC reboots.
5. If the PC isn’t able to boot after enabling Secure Boot, go back into the BIOS menus, disable Secure Boot, and try to boot the PC again.