Internet Computer Wiki - User contributions [en]

IC-OS Installation - UEFI Configuration - Gen2 Supermicro

2023-07-20T15:00:28Z

Nikita.abdullin:

== 1. UEFI - Enter Setup ==

# Reboot or power on the server.
# Watch for the screen with the Supermicro logo and boot options underneath it. Press DEL (delete) a couple of times, once the options are listed.
#: [[File:UEFI_Gen2_Supermicro_Post_Screen.png|580px]]
# If your option is recognized by the system, it will say: "Entering Setup…"

== 2. UEFI - Check Version ==

# Check the version number at the bottom of the screen. Ensure the UEFI/BIOS version is '''2.21.1280''' or higher. This version was tested and found to support features required for IC-OS.
#* Is your version lower than '''2.21.1280'''? Download the latest version and follow the included instructions at the [https://www.supermicro.com/en/support/resources/downloadcenter/swdownload Supermicro support site]

== 3. UEFI - Advanced Settings ==

# Change to the '''Advanced''' menu. Then select '''Boot Feature''' and press enter
#: [[File:UEFI_Gen2_Supermicro_Advanced_Menu_Boot_Feature_Highlighted.jpg|580px]]
# Set '''Wait For "F1" If Error''' to '''Disabled'''; press ESC (escape) to return to previous menu
#: [[File:UEFI_Gen2_Supermicro_Advanced_Boot_Feature_Menu_Wait_For_F1.jpg|580px]]
# Select '''ACPI Settings''' and press enter
#: [[File:UEFI_Gen2_Supermicro_Advanced_Menu_ACPI_Highlighted.jpg|580px]]
# Set '''PCI AER Support''' to '''Enabled'''; set '''NUMA Nodes Per Socket''' to '''NPS0''' ; press ESC (escape) to return to previous menu
#: [[File:UEFI_Gen2_Supermicro_Advanced_ACPI_Menu_ACPI_SRAT_L3_Cache.jpg|580px]]
# Select '''CPU Configuration''' and press enter
#: [[File:UEFI_Gen2_Supermicro_Advanced_Menu_CPU_Configuration_Highlighted.jpg|580px]]
# Set '''SMEE''' to '''Enabled'''
# Set '''SEV-ES ASID Space Limit Control''' to '''Manual'''
# Set '''SEV-ES ASID Space Limit''' to '''100'''
# Set '''SNP Memory (RMP Table) Coverage''' to '''Enabled'''
#: [[File:Supermicro SEV-SNP processor-settings.png.png|580px]]
# Press ESC (escape) to return to previous menu
# Select '''NB Configuration''' and press enter
#: [[File:UEFI_Gen2_Supermicro_Advanced_Menu_NB_Configuration_Highlighted.jpg|580px]]
# Set '''SEV-SNP Support''' to '''Enabled'''
#: [[File:UEFI_Gen2_Supermicro_Advanced_North_Bridge_Configuration_Menu_SEV-SNP_Support.jpg|580px]]
# Select '''xGMI Configuration''' and press enter
#: [[File:UEFI_Gen2_Supermicro_Advanced_North_Bridge_Configuration_Menu_xGMI_Highlighted.jpg|580px]]
# Set '''xGMI Max Speed''' to '''Auto'''; press ESC twice (escape) to return to previous previous menu
#: [[File:UEFI_Gen2_Supermicro_Advanced_North_Bridge_Configuration_xGMI_Menu_xGMI_Link_Max_Speed.jpg|580px]]
# Select '''PCIe/PCI/PnP Configuration''' and press enter
#: [[File:UEFI_Gen2_Supermicro_Advanced_Menu_PCIe_Configuration_Highlighted.jpg|580px]]
# Set '''SR-IOV Support''' to Enabled
#: [[File:UEFI_Gen2_Supermicro_Advanced_PCIe_Menu_SR-IOV_Support.jpg|580px]]
# Select '''Trusted Computing'''
#: [[File:UEFI Menu Supermicro TPM Settings.png|580px]]
# Set '''Security Device Support''' to '''Enabled'''
# Set '''SHA256 PCR Bank''' to '''Enabled'''
# Set '''Platform Hierarchy''' to '''Enabled'''
# Set '''Storage Hierarchy''' to '''Enabled'''
# Set '''Endorsement Hierarchy''' to '''Enabled'''
#: [[File:UEFI Menu Supermicro Advanced TrustedComputing.png|580px]]

== 4. UEFI - Boot Menu ==

# Change to the '''Boot''' menu; Set '''Boot Mode Select''' to '''UEFI'''
#: [[File:UEFI_Gen2_Supermicro_Boot_Menu_Boot_Mode_Select.jpg|580px]]
# Change to '''Save & Exit''' menu, then select '''Save Changes and Reset''' and press enter
# Select '''Yes''' at the prompt and press enter.
#: [[File:UEFI_Gen2_Supermicro_Save_And_Exit_Prompt.jpg|580px]]
The system will now reboot. Please do not unplug the IC-OS USB stick at this point.

== 5. Boot the IC-OS USB image ==
# Watch for the screen with the Supermicro logo and boot options underneath it. Press F11 a couple of times, once the options are listed.
#: [[File:UEFI_Gen2_Supermicro_Post_Screen.png|580px]]
# If the keypress was recognized by the system, it will print '''Invoking Boot Menu'''
#: [[File:SM-33.png]]
# In the boot menu, select the ''first partition on the USB device'' and press enter, e.g.:
#: [[File:SM-35.png|580px]]
<br>

== Return to the Installation Runbook ==

* If using the '''non-HSM''' onboarding procedure, return to the [[IC-OS Installation Runbook#8. UEFI Setup and Boot Menu|IC-OS Installation Runbook]].

* If using the '''legacy, HSM''' onboarding procedure, return to the [[NitroKey HSM installation runbook#8. UEFI Setup and Boot Menu|NitroKey HSM installation runbook]]

File:UEFI Menu Supermicro Advanced TrustedComputing.png

2023-07-20T14:59:30Z

Nikita.abdullin:

UEFI Menu Supermicro Advanced TrustedComputing settings

File:UEFI Menu Supermicro TPM Settings.png

2023-07-20T14:56:43Z

Nikita.abdullin:

UEFI Menu Supermicro TPM Settings

IC-OS Installation - UEFI Configuration - Gen2 Dell

2023-07-20T13:37:25Z

Nikita.abdullin:

== 1. UEFI - Enter System Setup and reset IDRAC password ==

# Reboot or power on the server.
# Watch for the ''blue screen'' with boot options in the top left corner.
# Press F2 a couple of times, once the options are listed.
# If your option is recognized by the system, it should be highlighting ''Entering System Setup''.
# In the System Setup, select iDRAC Settings and press enter.
#: [[File:Dell UEFI - iDRAC settings select.png|580px|screenshot]]
# Select User Configuration and press enter.
#: [[File:IDRAC settings - user configuration select.png|580px|screenshot]]
# Select Change Password and press enter.
#: [[File:IDRAC settings - user configuration.png|580px|screenshot]]
# Enter your desired password and select OK. This needs to be changed from the default the server ships with.
#: [[File:IDRAC settings - change password.png|580px|screenshot]]
# Select Back and Finish.

== 2. UEFI - Check Version ==

# In the System Setup, ''System BIOS'' press enter.
#: [[File:Select_System_Bios.png|580px|screenshot]]
# In the System BIOS, select ''System Information'' and press enter.
#: [[File:UEFI_Menu_Dell_SystemBiosMenu.png|580px]]
# Verify the System BIOS Version is at least 2.8.4
#: '''If BIOS Version is below 2.8.4, ABORT configuring and [https://www.dell.com/support/kbdoc/en-us/000128194/updating-firmware-and-drivers-on-dell-emc-poweredge-servers update] the BIOS.'''
#: [[File:UEFI_Menu_Dell_SystemInformation.png|580px]]
# Select ''Back'' to return to System BIOS.

== 3. UEFI - Processor Settings ==

# In System BIOS, select ''Processor Settings'' and press enter.
#: [[File:UEFI_Menu_Dell_SystemBiosMenu.png|580px]]
# Set ''Logical Processor'' to ''Enabled''
# Set ''Virtualization Technology'' to ''Enabled''
# Set ''NUMA Nodes Per Socket'' to ''0''[[File:UEFI Menu Dell ProcessorSettings p1 1.png|none|thumb|600x600px]]
# Set ''Secure Memory Encryption'' to ''Enabled''
# Set ''Minimum SEV non-ES ASID'' to ''253''
# Set ''Secure Nesting Paging'' to '''Enabled'''
# Set ''SNP Memory Coverage'' to '''Enabled'''
# Set ''Transparent Secure Memory Encryption'' to '''Disabled'''
#: [[File:UEFI_Menu_Dell_ProcessorSettings_p2.png|580px|screenshot]]
# Select ''Back'' to return to System BIOS.

== 4. UEFI - Boot Settings ==

# In System BIOS, select ''Boot Settings'' and press enter.
#: [[File:UEFI_Menu_Dell_SystemBiosMenu.png|580px]]
# Set ''Boot Mode'' to ''UEFI''
#: [[File:UEFI_Menu_Dell_BootSettings.png|580px]]
# Select ''Back'' to return to System BIOS.

== 5. UEFI - Integrated Devices ==

# In System BIOS, select ''Integrated Devices''
#: [[File:UEFI_Menu_Dell_SystemBiosMenu.png|580px]]
# Set ''Pcie Preffered IO Bus'' to ''Enabled''
# Set ''Enhanced Preferred IO'' to ''Enabled''
# Set ''SR-IOV Global Enable'' to ''Enabled''
#: [[File:UEFI_Menu_Dell_IntegratedDevices.png|580px]]
# Select ''Back'' to return to System BIOS.

== 6. UEFI - System Security ==
# In System BIOS, select ''System Security''
#: [[File:UEFI Menu Dell SystemSecurity TPM.png|580px]]
# Set ''TPM Security'' to ''On''
# Set ''TPM Hierarchy'' to ''Enabled''
# Select menu item ''TPM Advanced settings''
#: [[File:UEFI Menu Dell SystemSecurity TPM Advanced.png|580px]]
# Set ''TPM2 Algorithm Selection'' to ''SHA256''

== 7. UEFI - Miscellaneous Settings ==

# In System BIOS, select ''Miscellaneous Settings''
#: [[File:UEFI_Menu_Dell_SystemBios_Miscellaneous.png|580px]]
#
# Set ''F1/F2 Prompt on Error'' to ''Disabled''
# Select ''Back'' to return to System BIOS.
#: [[File:UEFI_Menu_Dell_MiscellaneousSettings.png|580px]]
#
# Select ''Finish'' and press ''enter''.
#: [[File:27.png|580px|screenshot]]
#
# Select ''Yes'' to save the changes and press ''enter''.
#: [[File:28.png|580px|screenshot]]
#
# Select ''OK'' and press ''enter''.
#: [[File:29.png|580px|screenshot]]
#
# Confirm the exit and press ''enter''. The system will reboot now. '''Please do not unplug the IC-OS USB stick''' at this point.

== 8. Boot Manager - Enter Boot Manager ==
#
# Watch for the Blue screen with boot options in the top left corner. Press ''F11'' a couple of times, once the options are listed.
#: [[File:16.png|580px|screenshot]]
#
# If your option is recognized by the system, it should highlight ''Entering Boot Manager''.
#: [[File:32.png|580px|screenshot]]
#
# In the Boot Manager, select ''One-shot UEFI Boot Menu'' and press ''enter''.
#: [[File:33.png|580px|screenshot]]
#
# In the Boot Menu, select your ''USB device'' and press ''enter''.
#: [[File:34.png|580px|screenshot]]
#

== Return to the Installation Runbook ==

* If using the '''non-HSM''' onboarding procedure, return to the [[IC-OS Installation Runbook#8. UEFI Setup and Boot Menu|IC-OS Installation Runbook]].

* If using the '''legacy, HSM''' onboarding procedure, return to the [[NitroKey HSM installation runbook#8. UEFI Setup and Boot Menu|NitroKey HSM installation runbook]]

File:UEFI Menu Dell SystemSecurity TPM.png

2023-07-20T13:35:35Z

Nikita.abdullin: Nikita.abdullin uploaded a new version of File:UEFI Menu Dell SystemSecurity TPM.png

UEFI Menu Dell System Security TPM settings

File:UEFI Menu Dell SystemSecurity TPM Advanced.png

2023-07-20T13:33:21Z

Nikita.abdullin:

UEFI Menu Dell System Security TPM Advanced Settings

File:UEFI Menu Dell SystemSecurity TPM.png

2023-07-20T13:26:14Z

Nikita.abdullin:

UEFI Menu Dell System Security TPM settings