EFI BC build [Solved: secure boot]

[blanalex]

I'm able to boot to iPXE in a VM in UEFI mode. In the DHCP request, the vendor field is PXEClient:Arch:00009, which means UEFI x64 architecture.

However my actual clients (eg Dell Latitude E5540, Lenovo ThinkPad T540p) have PXEClient:Arch:00007 in their vendor field, which means UEFI byte code. I've tried to push them the same binary but it doesn't work. The system downloads the NBP, the screen turn dark and skip to IPv6 booting.

Is there a way to build a Byte Code version?

[NiKiZe]

(2015-05-11 14:25)blanalex Wrote:  I'm able to boot to iPXE in a VM in UEFI mode. In the DHCP request, the vendor field is PXEClient:Arch:00009, which means UEFI x64 architecture.

However my actual clients (eg Dell Latitude E5540, Lenovo ThinkPad T540p) have PXEClient:Arch:00007 in their vendor field, which means UEFI byte code.

Do you have Secure Boot disabled (or set to Other and not Windows) since the ipxe.efi is not yet signed?

0007 is the normal x64 efi while 0009 seems to be the odd one out, are you sure this is correct?
Most of the time I refer to https://gist.github.com/robinsmidsrod/4008017

Possible related old bug: https://bugzilla.redhat.com/show_bug.cgi?id=1181980
Related commit in iPXE: https://git.ipxe.org/ipxe.git/commitdiff...3d7c101ef7
RFC: https://tools.ietf.org/html/rfc4578#section-2.1

Indeed 0007 should be BC and 0009 x64 but in real networks giving x64 to 0007 clients works.

Could you try to see if any of bin-x86_64/ipxe.efi or bin-i386-efi/ipxe.efi works? I have so far not seen any EFI machine that does not run or work with the 64 bit mode. (as long as Secure boot is disabled)

[blanalex]

You're right, it was secure boot.