Difference between revisions of "IC-OS Installation - UEFI Configuration - Gen2 Supermicro"

From Internet Computer Wiki
Jump to: navigation, search
m (Update supermicro processor settings)
m (Adding "Restore Optimized Defaults" step. Making sure our starting point is the same on all servers.)
 
(15 intermediate revisions by 3 users not shown)
Line 1: Line 1:
= UEFI - System BIOS - Enter Setup =
+
== 1. UEFI - Enter Setup ==
  
 
# Reboot or power on the server.
 
# Reboot or power on the server.
Line 6: Line 6:
 
# If your option is recognized by the system, it will say: "Entering Setup…"
 
# If your option is recognized by the system, it will say: "Entering Setup…"
  
= UEFI - System BIOS - Check Version =
+
== 2. UEFI - Check Version ==
  
 
# Check the version number at the bottom of the screen. Ensure the UEFI/BIOS version is '''2.21.1280''' or higher. This version was tested and found to support features required for IC-OS.
 
# Check the version number at the bottom of the screen. Ensure the UEFI/BIOS version is '''2.21.1280''' or higher. This version was tested and found to support features required for IC-OS.
 
#* Is your version lower than '''2.21.1280'''? Download the latest version and follow the included instructions at the [https://www.supermicro.com/en/support/resources/downloadcenter/swdownload Supermicro support site]
 
#* Is your version lower than '''2.21.1280'''? Download the latest version and follow the included instructions at the [https://www.supermicro.com/en/support/resources/downloadcenter/swdownload Supermicro support site]
  
= UEFI - System BIOS - Advanced Settings =
 
  
# Change to the '''Advanced''' menu. Then select '''Boot Feature''' and press enter
+
== 3. Restore Optimized Defaults ==
#: [[File:UEFI_Gen2_Supermicro_Advanced_Menu_Boot_Feature_Highlighted.jpg|580px]]
 
# Set '''Wait For "F1" If Error''' to '''Disabled'''; press ESC (escape) to return to previous menu
 
#: [[File:UEFI_Gen2_Supermicro_Advanced_Boot_Feature_Menu_Wait_For_F1.jpg|580px]]
 
# Select '''ACPI Settings''' and press enter
 
#: [[File:UEFI_Gen2_Supermicro_Advanced_Menu_ACPI_Highlighted.jpg|580px]]
 
# Set '''PCI AER Support''' to '''Enabled'''; set '''NUMA Nodes Per Socket''' to '''NPS0''' ; press ESC (escape) to return to previous menu
 
#: [[File:UEFI_Gen2_Supermicro_Advanced_ACPI_Menu_ACPI_SRAT_L3_Cache.jpg|580px]]
 
# Select '''CPU Configuration''' and press enter
 
#: [[File:UEFI_Gen2_Supermicro_Advanced_Menu_CPU_Configuration_Highlighted.jpg|580px]]
 
# Set '''SMEE''' to '''Enabled'''
 
# Set '''SEV-ES ASID Space Limit Control''' to '''Manual'''
 
# Set '''SEV-ES ASID Space Limit''' to '''100'''
 
# Set '''SNP Memory (RMP Table) Coverage''' to '''Enabled'''
 
#: [[File:Supermicro SEV-SNP processor-settings.png.png|580px]]
 
# Press ESC (escape) to return to previous menu
 
# Select '''NB Configuration''' and press enter
 
#: [[File:UEFI_Gen2_Supermicro_Advanced_Menu_NB_Configuration_Highlighted.jpg|580px]]
 
# Set '''SEV-SNP Support''' to '''Enabled'''
 
#: [[File:UEFI_Gen2_Supermicro_Advanced_North_Bridge_Configuration_Menu_SEV-SNP_Support.jpg|580px]]
 
# Select '''xGMI Configuration''' and press enter
 
#: [[File:UEFI_Gen2_Supermicro_Advanced_North_Bridge_Configuration_Menu_xGMI_Highlighted.jpg|580px]]
 
# Set '''xGMI Max Speed''' to '''Auto'''; press ESC twice (escape) to return to previous previous menu
 
#: [[File:UEFI_Gen2_Supermicro_Advanced_North_Bridge_Configuration_xGMI_Menu_xGMI_Link_Max_Speed.jpg|580px]]
 
# Select '''PCIe/PCI/PnP Configuration''' and press enter
 
#: [[File:UEFI_Gen2_Supermicro_Advanced_Menu_PCIe_Configuration_Highlighted.jpg|580px]]
 
# Set '''SR-IOV Support''' to Enabled
 
#: [[File:UEFI_Gen2_Supermicro_Advanced_PCIe_Menu_SR-IOV_Support.jpg|580px]]
 
  
= UEFI - System BIOS - Boot Menu =
+
* Select "Restore Optimized Defaults" from the '''Save & Exit''' menu before makimg the changes below.
 +
* Save changes
  
# Change to the '''Boot''' menu; Set '''Boot Mode Select''' to '''UEFI'''
+
== 4. UEFI - Advanced Settings ==
#: [[File:UEFI_Gen2_Supermicro_Boot_Menu_Boot_Mode_Select.jpg|580px]]
+
 
# Change to '''Save & Exit''' menu, then select '''Save Changes and Reset''' and press enter
+
# Change to the '''Advanced''' menu. Then, select '''Boot Feature''' and press enter.
# Select '''Yes''' at the prompt and press enter.
+
#:[[File:UEFI_Gen2_Supermicro_Advanced_Menu_Boot_Feature_Highlighted.jpg|580px]]
#: [[File:UEFI_Gen2_Supermicro_Save_And_Exit_Prompt.jpg|580px]]
+
# Set '''Wait For "F1" If Error''' to '''Disabled'''; press ESC (escape) to return to previous menu.
 +
#:[[File:UEFI_Gen2_Supermicro_Advanced_Boot_Feature_Menu_Wait_For_F1.jpg|580px]]
 +
# Select '''ACPI Settings''' and press enter.
 +
#:[[File:UEFI_Gen2_Supermicro_Advanced_Menu_ACPI_Highlighted.jpg|580px]]
 +
# Set '''PCI AER Support''' to '''Enabled'''; set '''NUMA Nodes Per Socket''' to '''NPS0'''; press ESC (escape) to return to previous menu.
 +
#:[[File:UEFI_Gen2_Supermicro_Advanced_ACPI_Menu_ACPI_SRAT_L3_Cache.jpg|580px]]
 +
# Select '''CPU Configuration''' and press enter.
 +
#:[[File:UEFI_Gen2_Supermicro_Advanced_Menu_CPU_Configuration_Highlighted.jpg|580px]]
 +
# Set '''SMT Control''' to '''Enabled'''.
 +
# Set '''SMEE''' to '''Enabled'''.
 +
# Set '''SEV ASID Count''' to '''253 ASIDs'''.
 +
# Set '''SEV-ES ASID Space Limit Control''' to '''Manual'''.
 +
# Set '''SEV-ES ASID Space Limit''' to '''100'''.
 +
# Set '''SNP Memory (RMP Table) Coverage''' to '''Enabled'''.
 +
# Set '''SVM Mode''' to '''Enabled'''.
 +
#:[[File:SPM bios CPU Config.png|580px]]
 +
# Press ESC (escape) to return to previous menu.
 +
# Select '''NB Configuration''' and press enter.
 +
#:[[File:UEFI_Gen2_Supermicro_Advanced_Menu_NB_Configuration_Highlighted.jpg|580px]]
 +
# Set '''SEV-SNP Support''' to '''Enabled'''.
 +
#:[[File:UEFI_Gen2_Supermicro_Advanced_North_Bridge_Configuration_Menu_SEV-SNP_Support.jpg|580px]]
 +
#Select '''xGMI Configuration''' and press enter.
 +
#:[[File:UEFI_Gen2_Supermicro_Advanced_North_Bridge_Configuration_Menu_xGMI_Highlighted.jpg|580px]]
 +
#Set '''xGMI Max Speed''' to '''22Gbps'''; press escape to return to the previous menu.
 +
#:[[File:Screenshot 2023-08-04 at 9.55.32 AM.png|580px]]
 +
#Select '''Memory Configuration''' and press '''enter'''.
 +
#:[[File:Screenshot 2023-08-03 at 5.19.46 PM.png|580px]]
 +
#Set '''TSME''' to '''Disabled'''.
 +
#:[[File:Screenshot 2023-08-03 at 5.20.27 PM.png|580px]]
 +
#Press '''ESC''' twice (escape) to return to the '''Advanced''' main menu.
 +
#Select '''PCIe/PCI/PnP Configuration''' and press enter.
 +
#:[[File:UEFI_Gen2_Supermicro_Advanced_Menu_PCIe_Configuration_Highlighted.jpg|580px]]
 +
#Set '''SR-IOV Support''' to '''Enabled'''.
 +
#:[[File:UEFI_Gen2_Supermicro_Advanced_PCIe_Menu_SR-IOV_Support.jpg|580px]]
 +
#Select '''Trusted Computing'''.
 +
#:[[File:UEFI Menu Supermicro TPM Settings.png|580px]]
 +
#Set '''Security Device Support''' to '''Enabled'''.
 +
#Set '''SHA256 PCR Bank''' to '''Enabled'''.
 +
#Set '''Platform Hierarchy''' to '''Enabled'''.
 +
#Set '''Storage Hierarchy''' to '''Enabled'''.
 +
#Set '''Endorsement Hierarchy''' to '''Enabled'''.
 +
#:[[File:UEFI Menu Supermicro Advanced TrustedComputing.png|580px]]
 +
 
 +
==5. UEFI - Boot Menu==
 +
 
 +
#Change to the '''Boot''' menu; Set '''Boot Mode Select''' to '''UEFI'''.
 +
#:[[File:UEFI_Gen2_Supermicro_Boot_Menu_Boot_Mode_Select.jpg|580px]]
 +
#Change to '''Save & Exit''' menu, then select '''Save Changes and Reset''' and press enter.
 +
#Select '''Yes''' at the prompt and press enter.
 +
#:[[File:UEFI_Gen2_Supermicro_Save_And_Exit_Prompt.jpg|580px]]
 
The system will now reboot. Please do not unplug the IC-OS USB stick at this point.
 
The system will now reboot. Please do not unplug the IC-OS USB stick at this point.
  
= Boot the IC-OS USB image =  
+
== 6. Boot the IC-OS USB image==
 
# Watch for the screen with the Supermicro logo and boot options underneath it. Press F11 a couple of times, once the options are listed.
 
# Watch for the screen with the Supermicro logo and boot options underneath it. Press F11 a couple of times, once the options are listed.
#: [[File:UEFI_Gen2_Supermicro_Post_Screen.png|580px]]
+
#:[[File:UEFI_Gen2_Supermicro_Post_Screen.png|580px]]
# If the keypress was recognized by the system, it will print '''Invoking Boot Menu'''
+
#If the keypress was recognized by the system, it will print '''Invoking Boot Menu'''.
#: [[File:SM-33.png]]
+
#:[[File:SM-33.png]]
# In the boot menu, select the ''first partition on the USB device'' and press enter, e.g.:
+
#In the boot menu, select the ''first partition on the USB device'' and press enter, e.g.:
#: [[File:SM-35.png|580px]]
+
#:[[File:SM-35.png|580px]]
 
<br>
 
<br>
Return to the [[IC OS Installation Runbook#6._UEFI_Setup_and_Boot_Menu|IC-OS Installation Runbook]]
+
 
 +
==Return to the Installation Runbook==
 +
 
 +
*If using the '''non-HSM''' onboarding procedure, return to the [[IC-OS Installation Runbook#8. UEFI Setup and Boot Menu|IC-OS Installation Runbook]].
 +
 
 +
*If using the '''legacy, HSM''' onboarding procedure, return to the [[NitroKey HSM installation runbook#8. UEFI Setup and Boot Menu|NitroKey HSM installation runbook.]]

Latest revision as of 07:42, 13 December 2023

1. UEFI - Enter Setup

  1. Reboot or power on the server.
  2. Watch for the screen with the Supermicro logo and boot options underneath it. Press DEL (delete) a couple of times, once the options are listed.
    UEFI Gen2 Supermicro Post Screen.png
  3. If your option is recognized by the system, it will say: "Entering Setup…"

2. UEFI - Check Version

  1. Check the version number at the bottom of the screen. Ensure the UEFI/BIOS version is 2.21.1280 or higher. This version was tested and found to support features required for IC-OS.
    • Is your version lower than 2.21.1280? Download the latest version and follow the included instructions at the Supermicro support site


3. Restore Optimized Defaults

  • Select "Restore Optimized Defaults" from the Save & Exit menu before makimg the changes below.
  • Save changes

4. UEFI - Advanced Settings

  1. Change to the Advanced menu. Then, select Boot Feature and press enter.
    UEFI Gen2 Supermicro Advanced Menu Boot Feature Highlighted.jpg
  2. Set Wait For "F1" If Error to Disabled; press ESC (escape) to return to previous menu.
    UEFI Gen2 Supermicro Advanced Boot Feature Menu Wait For F1.jpg
  3. Select ACPI Settings and press enter.
    UEFI Gen2 Supermicro Advanced Menu ACPI Highlighted.jpg
  4. Set PCI AER Support to Enabled; set NUMA Nodes Per Socket to NPS0; press ESC (escape) to return to previous menu.
    UEFI Gen2 Supermicro Advanced ACPI Menu ACPI SRAT L3 Cache.jpg
  5. Select CPU Configuration and press enter.
    UEFI Gen2 Supermicro Advanced Menu CPU Configuration Highlighted.jpg
  6. Set SMT Control to Enabled.
  7. Set SMEE to Enabled.
  8. Set SEV ASID Count to 253 ASIDs.
  9. Set SEV-ES ASID Space Limit Control to Manual.
  10. Set SEV-ES ASID Space Limit to 100.
  11. Set SNP Memory (RMP Table) Coverage to Enabled.
  12. Set SVM Mode to Enabled.
    SPM bios CPU Config.png
  13. Press ESC (escape) to return to previous menu.
  14. Select NB Configuration and press enter.
    UEFI Gen2 Supermicro Advanced Menu NB Configuration Highlighted.jpg
  15. Set SEV-SNP Support to Enabled.
    UEFI Gen2 Supermicro Advanced North Bridge Configuration Menu SEV-SNP Support.jpg
  16. Select xGMI Configuration and press enter.
    UEFI Gen2 Supermicro Advanced North Bridge Configuration Menu xGMI Highlighted.jpg
  17. Set xGMI Max Speed to 22Gbps; press escape to return to the previous menu.
    Screenshot 2023-08-04 at 9.55.32 AM.png
  18. Select Memory Configuration and press enter.
    Screenshot 2023-08-03 at 5.19.46 PM.png
  19. Set TSME to Disabled.
    Screenshot 2023-08-03 at 5.20.27 PM.png
  20. Press ESC twice (escape) to return to the Advanced main menu.
  21. Select PCIe/PCI/PnP Configuration and press enter.
    UEFI Gen2 Supermicro Advanced Menu PCIe Configuration Highlighted.jpg
  22. Set SR-IOV Support to Enabled.
    UEFI Gen2 Supermicro Advanced PCIe Menu SR-IOV Support.jpg
  23. Select Trusted Computing.
    UEFI Menu Supermicro TPM Settings.png
  24. Set Security Device Support to Enabled.
  25. Set SHA256 PCR Bank to Enabled.
  26. Set Platform Hierarchy to Enabled.
  27. Set Storage Hierarchy to Enabled.
  28. Set Endorsement Hierarchy to Enabled.
    UEFI Menu Supermicro Advanced TrustedComputing.png

5. UEFI - Boot Menu

  1. Change to the Boot menu; Set Boot Mode Select to UEFI.
    UEFI Gen2 Supermicro Boot Menu Boot Mode Select.jpg
  2. Change to Save & Exit menu, then select Save Changes and Reset and press enter.
  3. Select Yes at the prompt and press enter.
    UEFI Gen2 Supermicro Save And Exit Prompt.jpg

The system will now reboot. Please do not unplug the IC-OS USB stick at this point.

6. Boot the IC-OS USB image

  1. Watch for the screen with the Supermicro logo and boot options underneath it. Press F11 a couple of times, once the options are listed.
    UEFI Gen2 Supermicro Post Screen.png
  2. If the keypress was recognized by the system, it will print Invoking Boot Menu.
    SM-33.png
  3. In the boot menu, select the first partition on the USB device and press enter, e.g.:
    SM-35.png


Return to the Installation Runbook