Difference between revisions of "IC-OS Installation - UEFI Configuration - Gen2 Gigabyte"

Revision as of 16:02, 1 August 2023

1. UEFI - Enter Setup

Reboot or power on the server.
Watch for the screen with the Gigabyte logo and boot options underneath it. Press DEL (delete) a couple of times, once the options are listed to enter setup.

2. UEFI - Check Version

Check the version number at the bottom of the screen. Ensure the UEFI/BIOS version is 2.21.1280 or higher. This version was tested and found to support features required for IC-OS.
- Is your version lower than 2.21.1280? Download the latest version and follow the included instructions at the Gigabyte support site

3. UEFI - Advanced Settings

Change to the Advanced menu. Then select PCI Subsystem Settings and press enter
Set SR-IOV Support to Enabled (scroll to bottom of page to find setting); then press escape to return to the Advanced main menu.
Select Trusted Computing
Set Security Device Support to Enabled
Set SHA256 PCR Bank to Enabled
Set Platform Hierarchy to Enabled
Set Storage Hierarchy to Enabled
Set Endorsement Hierarchy to Enabled
Press escape to return to the Advanced main menu.

4. UEFI - AMD CBS

Change to the AMD CBS menu. Then select CPU Common Options and press enter
Set SEV-ES ASID Space Limit Control to Manual
Set SEV-ES ASID Space Limit to 100
Set SNP Memory (RMP Table) Coverage to Enabled
Set SMEE to Enabled
Select Performance
Set SMT Control to Enabled
Press escape twice to return to the AMD CBS main menu.
Select DF Common Options and press enter
Select Memory Addressing and press enter
Set NUMA nodes per socket to NPS0
Press escape twice to return to the AMD CBS main menu.
Select NBIO Common Options and press enter
Set SEV-SNP Support to Enabled
Press escape to return to the AMD CBS main menu.

5. UEFI - Boot Menu

Change to the Boot menu. Then set Boot Mode Select to UEFI
Select Save Changes and Exit, then select Yes' at the prompt and press enter.

The system will now reboot. Please do not unplug the IC-OS USB stick at this point.

6. Boot the IC-OS USB image

Watch for the screen with the Gigabyte logo and boot options underneath it. Press F10 a couple of times, once the options are listed.
In the boot menu, select the first partition on the USB device and press enter, e.g.:

Return to the Installation Runbook

If using the non-HSM onboarding procedure, return to the IC-OS Installation Runbook.

If using the legacy, HSM onboarding procedure, return to the NitroKey HSM installation runbook

@@ Line 34: / Line 34: @@
 #Set '''SMEE''' to '''Enabled'''
 #:[[File:Gigabyte bios 1.jpg|580px]]
-#Press '''escape''' to return to the '''AMD CBS''' main menu.
 #Select '''Performance'''
-#: PHOTO
+#:[[File:Giga bios performance.png|580px]]
 #Set '''SMT Control''' to '''Enabled'''
-#: PHOTO
+#:[[File:Giga bios SMT.jpg|580px]]
+#Press '''escape''' twice to return to the '''AMD CBS''' main menu.
 #Select '''DF Common Options''' and press '''enter'''
-#: [[File:Giga bios DF.png|580px]]
+#:[[File:Giga bios DF.png|580px]]
 #Select '''Memory Addressing''' and press '''enter'''
-#: [[File:Giga bios memory addressing.png|580px]]
+#:[[File:Giga bios memory addressing.png|580px]]
 #Set '''NUMA nodes per socket''' to '''NPS0'''
-#: [[File:Giga bios NUMA.jpg|580px]]
+#:[[File:Giga bios NUMA.jpg|580px]]
 #Press '''escape''' twice to return to the '''AMD CBS''' main menu.
 #Select '''NBIO Common Options''' and press '''enter'''
 #:[[File:Gigabyte bios 13.jpg|580px]]
-# Set '''SEV-SNP Support''' to '''Enabled'''
+#Set '''SEV-SNP Support''' to '''Enabled'''
 #:[[File:Gigabyte bios 14.jpg|580px]]
 #Press '''escape''' to return to the '''AMD CBS''' main menu.
-== 5. UEFI - Boot Menu==
+==5. UEFI - Boot Menu==
-#Change to the '''Boot''' menu. Then set '''Boot Mode Select''' to '''UEFI'''
+# Change to the '''Boot''' menu. Then set '''Boot Mode Select''' to '''UEFI'''
 #:[[File:Gigabyte bios 19.jpg|580px]]
 #Select '''Save Changes and Exit'', then select '''''<nowiki/>''Yes''<nowiki/>''<nowiki/>'<nowiki/>'' at''<nowiki/>'' the prompt and press '''enter'''.
@@ Line 64: / Line 64: @@
 #:[[File:Gigabyte loading screen.jpg|580px]]
 #In the boot menu, select the ''first partition on the USB device'' and press '''enter''', e.g.:
-#: [[File:SM-35.png|580px]]
+#:[[File:SM-35.png|580px]]
 <br>
@@ Line 70: / Line 70: @@
 ==Return to the Installation Runbook==
-*If using the '''non-HSM''' onboarding procedure, return to the [[IC-OS Installation Runbook#8. UEFI Setup and Boot Menu|IC-OS Installation Runbook]].
+* If using the '''non-HSM''' onboarding procedure, return to the [[IC-OS Installation Runbook#8. UEFI Setup and Boot Menu|IC-OS Installation Runbook]].
-*If using the '''legacy, HSM''' onboarding procedure, return to the [[NitroKey HSM installation runbook#8. UEFI Setup and Boot Menu|NitroKey HSM installation runbook]]
+* If using the '''legacy, HSM''' onboarding procedure, return to the [[NitroKey HSM installation runbook#8. UEFI Setup and Boot Menu|NitroKey HSM installation runbook]]