Difference between revisions of "IC-OS Installation - UEFI Configuration - Gen2 Supermicro"

Revision as of 22:24, 3 August 2023

1. UEFI - Enter Setup

Reboot or power on the server.
Watch for the screen with the Supermicro logo and boot options underneath it. Press DEL (delete) a couple of times, once the options are listed.
If your option is recognized by the system, it will say: "Entering Setup…"

2. UEFI - Check Version

Check the version number at the bottom of the screen. Ensure the UEFI/BIOS version is 2.21.1280 or higher. This version was tested and found to support features required for IC-OS.
- Is your version lower than 2.21.1280? Download the latest version and follow the included instructions at the Supermicro support site

3. UEFI - Advanced Settings

Change to the Advanced menu. Then select Boot Feature and press enter
Set Wait For "F1" If Error to Disabled; press ESC (escape) to return to previous menu
Select ACPI Settings and press enter
Set PCI AER Support to Enabled; set NUMA Nodes Per Socket to NPS0 ; press ESC (escape) to return to previous menu
Select CPU Configuration and press enter
Set SMT Control to Enabled
Set SMEE to Enabled
Set SEV ASID Count to 253 ASIDs
Set SEV-ES ASID Space Limit Control to Manual
Set SEV-ES ASID Space Limit to 100
Set SNP Memory (RMP Table) Coverage to Enabled
Set SVM Mode to Enabled
Press ESC (escape) to return to previous menu
Select NB Configuration and press enter
Set SEV-SNP Support to Enabled
Select xGMI Configuration and press enter
Set xGMI Max Speed to Auto; press escape to return to previous previous menu
Select Memory Configuration and press enter
Set TSME to Disabled
Press ESC twice (escape) to return to the Advanced main menu
Select PCIe/PCI/PnP Configuration and press enter
Set SR-IOV Support to Enabled
Select Trusted Computing
Set Security Device Support to Enabled
Set SHA256 PCR Bank to Enabled
Set Platform Hierarchy to Enabled
Set Storage Hierarchy to Enabled
Set Endorsement Hierarchy to Enabled

4. UEFI - Boot Menu

Change to the Boot menu; Set Boot Mode Select to UEFI
Change to Save & Exit menu, then select Save Changes and Reset and press enter
Select Yes at the prompt and press enter.

The system will now reboot. Please do not unplug the IC-OS USB stick at this point.

5. Boot the IC-OS USB image

Watch for the screen with the Supermicro logo and boot options underneath it. Press F11 a couple of times, once the options are listed.
If the keypress was recognized by the system, it will print Invoking Boot Menu
In the boot menu, select the first partition on the USB device and press enter, e.g.:

Return to the Installation Runbook

If using the non-HSM onboarding procedure, return to the IC-OS Installation Runbook.

If using the legacy, HSM onboarding procedure, return to the NitroKey HSM installation runbook

@@ Line 35: / Line 35: @@
 #: [[File:UEFI_Gen2_Supermicro_Advanced_Menu_NB_Configuration_Highlighted.jpg|580px]]
 # Set '''SEV-SNP Support''' to '''Enabled'''
-#: [[File:UEFI_Gen2_Supermicro_Advanced_North_Bridge_Configuration_Menu_SEV-SNP_Support.jpg|580px]]
+#:[[File:UEFI_Gen2_Supermicro_Advanced_North_Bridge_Configuration_Menu_SEV-SNP_Support.jpg|580px]]
-# Select '''xGMI Configuration''' and press enter
+#Select '''xGMI Configuration''' and press enter
-#: [[File:UEFI_Gen2_Supermicro_Advanced_North_Bridge_Configuration_Menu_xGMI_Highlighted.jpg|580px]]
+#:[[File:UEFI_Gen2_Supermicro_Advanced_North_Bridge_Configuration_Menu_xGMI_Highlighted.jpg|580px]]
-# Set '''xGMI Max Speed''' to '''Auto'''; press ESC twice (escape) to return to previous previous menu
+#Set '''xGMI Max Speed''' to '''Auto'''; press escape to return to previous previous menu
-#: [[File:UEFI_Gen2_Supermicro_Advanced_North_Bridge_Configuration_xGMI_Menu_xGMI_Link_Max_Speed.jpg|580px]]
+#:[[File:UEFI_Gen2_Supermicro_Advanced_North_Bridge_Configuration_xGMI_Menu_xGMI_Link_Max_Speed.jpg|580px]]
-# Select '''PCIe/PCI/PnP Configuration''' and press enter
+#Select '''Memory Configuration''' and press '''enter'''
-#: [[File:UEFI_Gen2_Supermicro_Advanced_Menu_PCIe_Configuration_Highlighted.jpg|580px]]
+#:[[File:Screenshot 2023-08-03 at 5.19.46 PM.png|580px]]
-# Set '''SR-IOV Support''' to Enabled
+#Set '''TSME''' to '''Disabled'''
-#: [[File:UEFI_Gen2_Supermicro_Advanced_PCIe_Menu_SR-IOV_Support.jpg|580px]]
+#:[[File:Screenshot 2023-08-03 at 5.20.27 PM.png|580px]]
-# Select '''Trusted Computing'''
+#Press '''ESC''' twice (escape) to return to the '''Advanced''' main menu
-#: [[File:UEFI Menu Supermicro TPM Settings.png|580px]]
+#Select '''PCIe/PCI/PnP Configuration''' and press enter
-# Set '''Security Device Support''' to '''Enabled'''
+#:[[File:UEFI_Gen2_Supermicro_Advanced_Menu_PCIe_Configuration_Highlighted.jpg|580px]]
-# Set '''SHA256 PCR Bank''' to '''Enabled'''
+#Set '''SR-IOV Support''' to Enabled
-# Set '''Platform Hierarchy''' to '''Enabled'''
+#:[[File:UEFI_Gen2_Supermicro_Advanced_PCIe_Menu_SR-IOV_Support.jpg|580px]]
-# Set '''Storage Hierarchy''' to '''Enabled'''
+#Select '''Trusted Computing'''
-# Set '''Endorsement Hierarchy''' to '''Enabled'''
+#:[[File:UEFI Menu Supermicro TPM Settings.png|580px]]
-#: [[File:UEFI Menu Supermicro Advanced TrustedComputing.png|580px]]
+#Set '''Security Device Support''' to '''Enabled'''
+#Set '''SHA256 PCR Bank''' to '''Enabled'''
+#Set '''Platform Hierarchy''' to '''Enabled'''
+#Set '''Storage Hierarchy''' to '''Enabled'''
+#Set '''Endorsement Hierarchy''' to '''Enabled'''
+#:[[File:UEFI Menu Supermicro Advanced TrustedComputing.png|580px]]
-== 4. UEFI - Boot Menu ==
+==4. UEFI - Boot Menu==
-# Change to the '''Boot''' menu; Set '''Boot Mode Select''' to '''UEFI'''
+#Change to the '''Boot''' menu; Set '''Boot Mode Select''' to '''UEFI'''
-#: [[File:UEFI_Gen2_Supermicro_Boot_Menu_Boot_Mode_Select.jpg|580px]]
+#:[[File:UEFI_Gen2_Supermicro_Boot_Menu_Boot_Mode_Select.jpg|580px]]
-# Change to '''Save & Exit''' menu, then select '''Save Changes and Reset''' and press enter
+#Change to '''Save & Exit''' menu, then select '''Save Changes and Reset''' and press enter
-# Select '''Yes''' at the prompt and press enter.
+#Select '''Yes''' at the prompt and press enter.
-#: [[File:UEFI_Gen2_Supermicro_Save_And_Exit_Prompt.jpg|580px]]
+#:[[File:UEFI_Gen2_Supermicro_Save_And_Exit_Prompt.jpg|580px]]
 The system will now reboot. Please do not unplug the IC-OS USB stick at this point.
-== 5. Boot the IC-OS USB image ==
+== 5. Boot the IC-OS USB image==
 # Watch for the screen with the Supermicro logo and boot options underneath it. Press F11 a couple of times, once the options are listed.
-#: [[File:UEFI_Gen2_Supermicro_Post_Screen.png|580px]]
+#:[[File:UEFI_Gen2_Supermicro_Post_Screen.png|580px]]
-# If the keypress was recognized by the system, it will print '''Invoking Boot Menu'''
+#If the keypress was recognized by the system, it will print '''Invoking Boot Menu'''
-#: [[File:SM-33.png]]
+#:[[File:SM-33.png]]
-# In the boot menu, select the ''first partition on the USB device'' and press enter, e.g.:
+#In the boot menu, select the ''first partition on the USB device'' and press enter, e.g.:
-#: [[File:SM-35.png|580px]]
+#:[[File:SM-35.png|580px]]
 <br>
-== Return to the Installation Runbook ==
+==Return to the Installation Runbook==
-* If using the '''non-HSM''' onboarding procedure, return to the [[IC-OS Installation Runbook#8. UEFI Setup and Boot Menu|IC-OS Installation Runbook]].
+*If using the '''non-HSM''' onboarding procedure, return to the [[IC-OS Installation Runbook#8. UEFI Setup and Boot Menu|IC-OS Installation Runbook]].
-* If using the '''legacy, HSM''' onboarding procedure, return to the [[NitroKey HSM installation runbook#8. UEFI Setup and Boot Menu|NitroKey HSM installation runbook]]
+*If using the '''legacy, HSM''' onboarding procedure, return to the [[NitroKey HSM installation runbook#8. UEFI Setup and Boot Menu|NitroKey HSM installation runbook]]