Merge pull request #28396 from johnwilkins/telcodocs-121-sprint2

Configuring nodes for Secure Boot.

Author: ahardin-rh

modules/ipi-install-configuring-nodes.adoc

@@ -24,7 +24,8 @@ While the cluster nodes can contain more than two NICs, the installation process
 
 NIC1 is a non-routable network (`provisioning`) that is only used for the installation of the {product-title} cluster.
 
-The {op-system-base-full} 8.x installation process on the provisioner node might vary. To install {op-system-base-full} 8.x using a local satellite server or a PXE server, PXE-enable NIC2.
+The {op-system-base-full} 8.x installation process on the provisioner node might vary. To install {op-system-base-full} 8.x using a local Satellite server or a PXE server, PXE-enable NIC2.
+
 
 |===
 |PXE |Boot order
@@ -44,6 +45,8 @@ Configure the control plane and worker nodes as follows:
 | NIC1 PXE-enabled (provisioning network) | 1
 |===
 
+ifeval::[{release} > 4.3]
+
 .Configuring nodes without the `provisioning` network
 
 The installation process requires one NIC:
@@ -53,4 +56,23 @@ The installation process requires one NIC:
 | NICx | `baremetal` | <baremetal-vlan>
 |===
 
-NICx is a routable network (`baremetal`) that is used for the installation of the {product-title} cluster, and routable to the Internet.
+NICx is a routable network (`baremetal`) that is used for the installation of the {product-title} cluster, and routable to the internet.
+
+endif::[]
+
+ifeval::[{release} > 4.6]
+.Configuring nodes for Secure Boot
+
+Secure Boot prevents a node from booting unless it verifies the node is using only trusted software, such as UEFI firmware drivers, EFI applications and the operating system. Red Hat only supports Secure Boot when deploying with RedFish Virtual Media.
+
+To enable Secure Boot, refer to the hardware guide for the node. To enable Secure Boot, execute the following:
+
+. Boot the node and enter the BIOS menu.
+. Set the node's boot mode to UEFI Enabled.
+. Enable Secure Boot.
++
+[IMPORTANT]
+====
+Red Hat does not support Secure Boot with self-generated keys.
+====
+endif::[]