Notes and information about EKF PC6-TANGO UEFI/BIOS Firmware: ====================================================================================================================== 1) Problem with legacy CompactPCI peripheral boards with PCI-to-PCIE-Bridge (reverse bridge) ====================================================================================================================== Microsoft operating systems since Windows Vista and Windows 2008 support a feature named "PCI Express Native Control". If the operating system (Windows) invokes the "PCI Express Native Control" feature, PCI-to-PCIE-Bridges on peripheral boards will not start as expected (Error Code 10 in Windows Device Manager). This feature is not supported by PCI-to-PCIE-Bridges. This issue is relevant for EKF peripheral boards listed below: CB3, CE3, CK2, CL1, CL2, CN7, CP4, CP5 and CV2 There are 2 options to resolve this issue: 1. Disable "PCI Express Native Control" in UEFI/BIOS (Default setting with build #050+) 1. Turn on the system 2. Press F2 to enter UEFI/BIOS Setup settings 3. Navigate to "Advanced -> Advanced System Setup -> Miscellaneous Configuration" 4. Set "PCI Express Native" to Disabled 2. Disable "PCI Express Native Control" in Windows 1. Boot to Windows 2. Open a command prompt ("cmd") as administrator 3. Execute: "bcdedit /set {current} pciexpress forcedisable" to disable "PCI Express Native Control" [If you want to re-enable "PCI Express Native Control" execute: "bcdedit /set {current} pciexpress default"] 4. Reboot the system Attention! Disabling "PCI Express Native Control" may cause loss of other system features like: - PCI Express Native Hot Plug - PCI Express Native Power Management Events - PCI Express Advanced Error Reporting - PCI Express Capability Structure Control For further information visit the homepage of PLX Technology (www.plxtech.com) or Broadcom (www.broadcom.com). ====================================================================================================================== 2) Secure Boot ====================================================================================================================== Enable Secure Boot: 1. Start System 2. Press F2 to enter UEFI/BIOS Setup settings 3. Set Supervisor Password (Security -> Set Supervisor Password) 4. Enable Secure Boot Feature (Security -> Secure Boot Configuration -> Secure Boot Option = Enabled) 6. Load default EKF Secure Boot signatures (Security -> Secure Boot Configuration -> Reset to Default) 7. Press F12 to save configuration 8. Reboot system Secure Boot is now active. System won't boot/start bootloaders/EFI-Applications, which are not signed by Microsoft Corporation or EKF Elektronik GmbH! Enroll custom Signatures: 1. Copy your custom signatures in .cer format to an USB Stick (FAT32) 2. Enable Secure Boot (please follow the instructions above) 3. Enter Setup Mode of Secure Boot feature by deleting all default EKF signatures (Security -> Secure Boot Configuration -> Delete All Signatures) 4. Add your custom signatures for PK, KEK, db and/or dbx (Security -> Secure Boot Configuration -> Enroll Signatures) 5. Press F12 to save configuration 6. Reboot system ====================================================================================================================== Any questions? Send an Email to support@ekf.de 2019-10-30 EKF