Difference between revisions of "IC-OS Installation - UEFI Configuration - Gen2 Supermicro"

Revision as of 17:50, 18 November 2023

1. UEFI - Enter Setup

Reboot or power on the server.
Watch for the screen with the Supermicro logo and boot options underneath it. Press DEL (delete) a couple of times, once the options are listed.
If your option is recognized by the system, it will say: "Entering Setup…"

2. UEFI - Check Version

Check the version number at the bottom of the screen. Ensure the UEFI/BIOS version is 2.21.1280 or higher. This version was tested and found to support features required for IC-OS.
- Is your version lower than 2.21.1280? Download the latest version and follow the included instructions at the Supermicro support site

3. UEFI - Advanced Settings

Change to the Advanced menu. Then, select Boot Feature and press enter.
Set Wait For "F1" If Error to Disabled; press ESC (escape) to return to previous menu.
Select ACPI Settings and press enter.
Set PCI AER Support to Enabled; set NUMA Nodes Per Socket to NPS0; press ESC (escape) to return to previous menu.
Select CPU Configuration and press enter.
Set SMT Control to Enabled.
Set SMEE to Enabled.
Set SEV ASID Count to 253 ASIDs.
Set SEV-ES ASID Space Limit Control to Manual.
Set SEV-ES ASID Space Limit to 100.
Set SNP Memory (RMP Table) Coverage to Enabled.
Set SVM Mode to Enabled.
Press ESC (escape) to return to previous menu.
Select NB Configuration and press enter.
Set SEV-SNP Support to Enabled.
Select xGMI Configuration and press enter.
Set xGMI Max Speed to 22Gbps; press escape to return to the previous menu.
Select Memory Configuration and press enter.
Set TSME to Disabled.
Press ESC twice (escape) to return to the Advanced main menu.
Select PCIe/PCI/PnP Configuration and press enter.
Set SR-IOV Support to Enabled.
Select Trusted Computing.
Set Security Device Support to Enabled.
Set SHA256 PCR Bank to Enabled.
Set Platform Hierarchy to Enabled.
Set Storage Hierarchy to Enabled.
Set Endorsement Hierarchy to Enabled.

4. UEFI - Boot Menu

Change to the Boot menu; Set Boot Mode Select to UEFI.
Change to Save & Exit menu, then select Save Changes and Reset and press enter.
Select Yes at the prompt and press enter.

The system will now reboot. Please do not unplug the IC-OS USB stick at this point.

5. Boot the IC-OS USB image

Watch for the screen with the Supermicro logo and boot options underneath it. Press F11 a couple of times, once the options are listed.
If the keypress was recognized by the system, it will print Invoking Boot Menu.
In the boot menu, select the first partition on the USB device and press enter, e.g.:

Return to the Installation Runbook

If using the non-HSM onboarding procedure, return to the IC-OS Installation Runbook.

If using the legacy, HSM onboarding procedure, return to the NitroKey HSM installation runbook.

@@ Line 13: / Line 13: @@
 == 3. UEFI - Advanced Settings ==
-# Change to the '''Advanced''' menu. Then select '''Boot Feature''' and press enter
+# Change to the '''Advanced''' menu. Then, select '''Boot Feature''' and press enter.
-#: [[File:UEFI_Gen2_Supermicro_Advanced_Menu_Boot_Feature_Highlighted.jpg|580px]]
+#:[[File:UEFI_Gen2_Supermicro_Advanced_Menu_Boot_Feature_Highlighted.jpg|580px]]
-# Set '''Wait For "F1" If Error''' to '''Disabled'''; press ESC (escape) to return to previous menu
+# Set '''Wait For "F1" If Error''' to '''Disabled'''; press ESC (escape) to return to previous menu.
-#: [[File:UEFI_Gen2_Supermicro_Advanced_Boot_Feature_Menu_Wait_For_F1.jpg|580px]]
+#:[[File:UEFI_Gen2_Supermicro_Advanced_Boot_Feature_Menu_Wait_For_F1.jpg|580px]]
-# Select '''ACPI Settings''' and press enter
+# Select '''ACPI Settings''' and press enter.
-#: [[File:UEFI_Gen2_Supermicro_Advanced_Menu_ACPI_Highlighted.jpg|580px]]
+#:[[File:UEFI_Gen2_Supermicro_Advanced_Menu_ACPI_Highlighted.jpg|580px]]
-# Set '''PCI AER Support''' to '''Enabled'''; set '''NUMA Nodes Per Socket''' to '''NPS0''' ; press ESC (escape) to return to previous menu
+# Set '''PCI AER Support''' to '''Enabled'''; set '''NUMA Nodes Per Socket''' to '''NPS0'''; press ESC (escape) to return to previous menu.
-#: [[File:UEFI_Gen2_Supermicro_Advanced_ACPI_Menu_ACPI_SRAT_L3_Cache.jpg|580px]]
+#:[[File:UEFI_Gen2_Supermicro_Advanced_ACPI_Menu_ACPI_SRAT_L3_Cache.jpg|580px]]
-# Select '''CPU Configuration''' and press enter
+# Select '''CPU Configuration''' and press enter.
-#: [[File:UEFI_Gen2_Supermicro_Advanced_Menu_CPU_Configuration_Highlighted.jpg|580px]]
+#:[[File:UEFI_Gen2_Supermicro_Advanced_Menu_CPU_Configuration_Highlighted.jpg|580px]]
-# Set '''SMT Control''' to '''Enabled'''
+# Set '''SMT Control''' to '''Enabled'''.
-# Set '''SMEE''' to '''Enabled'''
+# Set '''SMEE''' to '''Enabled'''.
-# Set '''SEV ASID Count''' to '''253 ASIDs'''
+# Set '''SEV ASID Count''' to '''253 ASIDs'''.
-# Set '''SEV-ES ASID Space Limit Control''' to '''Manual'''
+# Set '''SEV-ES ASID Space Limit Control''' to '''Manual'''.
-# Set '''SEV-ES ASID Space Limit''' to '''100'''
+# Set '''SEV-ES ASID Space Limit''' to '''100'''.
-# Set '''SNP Memory (RMP Table) Coverage''' to '''Enabled'''
+# Set '''SNP Memory (RMP Table) Coverage''' to '''Enabled'''.
-# Set '''SVM Mode''' to '''Enabled'''
+# Set '''SVM Mode''' to '''Enabled'''.
-#: [[File:SPM bios CPU Config.png|580px]]
+#:[[File:SPM bios CPU Config.png|580px]]
-# Press ESC (escape) to return to previous menu
+# Press ESC (escape) to return to previous menu.
-# Select '''NB Configuration''' and press enter
+# Select '''NB Configuration''' and press enter.
-#: [[File:UEFI_Gen2_Supermicro_Advanced_Menu_NB_Configuration_Highlighted.jpg|580px]]
+#:[[File:UEFI_Gen2_Supermicro_Advanced_Menu_NB_Configuration_Highlighted.jpg|580px]]
-# Set '''SEV-SNP Support''' to '''Enabled'''
+# Set '''SEV-SNP Support''' to '''Enabled'''.
 #:[[File:UEFI_Gen2_Supermicro_Advanced_North_Bridge_Configuration_Menu_SEV-SNP_Support.jpg|580px]]
-#Select '''xGMI Configuration''' and press enter
+#Select '''xGMI Configuration''' and press enter.
 #:[[File:UEFI_Gen2_Supermicro_Advanced_North_Bridge_Configuration_Menu_xGMI_Highlighted.jpg|580px]]
-#Set '''xGMI Max Speed''' to '''22Gbps'''; press escape to return to previous previous menu
+#Set '''xGMI Max Speed''' to '''22Gbps'''; press escape to return to the previous menu.
 #:[[File:Screenshot 2023-08-04 at 9.55.32 AM.png|580px]]
-#Select '''Memory Configuration''' and press '''enter'''
+#Select '''Memory Configuration''' and press '''enter'''.
 #:[[File:Screenshot 2023-08-03 at 5.19.46 PM.png|580px]]
-#Set '''TSME''' to '''Disabled'''
+#Set '''TSME''' to '''Disabled'''.
 #:[[File:Screenshot 2023-08-03 at 5.20.27 PM.png|580px]]
-#Press '''ESC''' twice (escape) to return to the '''Advanced''' main menu
+#Press '''ESC''' twice (escape) to return to the '''Advanced''' main menu.
-#Select '''PCIe/PCI/PnP Configuration''' and press enter
+#Select '''PCIe/PCI/PnP Configuration''' and press enter.
 #:[[File:UEFI_Gen2_Supermicro_Advanced_Menu_PCIe_Configuration_Highlighted.jpg|580px]]
-#Set '''SR-IOV Support''' to Enabled
+#Set '''SR-IOV Support''' to '''Enabled'''.
 #:[[File:UEFI_Gen2_Supermicro_Advanced_PCIe_Menu_SR-IOV_Support.jpg|580px]]
-#Select '''Trusted Computing'''
+#Select '''Trusted Computing'''.
 #:[[File:UEFI Menu Supermicro TPM Settings.png|580px]]
-#Set '''Security Device Support''' to '''Enabled'''
+#Set '''Security Device Support''' to '''Enabled'''.
-#Set '''SHA256 PCR Bank''' to '''Enabled'''
+#Set '''SHA256 PCR Bank''' to '''Enabled'''.
-#Set '''Platform Hierarchy''' to '''Enabled'''
+#Set '''Platform Hierarchy''' to '''Enabled'''.
-#Set '''Storage Hierarchy''' to '''Enabled'''
+#Set '''Storage Hierarchy''' to '''Enabled'''.
-#Set '''Endorsement Hierarchy''' to '''Enabled'''
+#Set '''Endorsement Hierarchy''' to '''Enabled'''.
 #:[[File:UEFI Menu Supermicro Advanced TrustedComputing.png|580px]]
 ==4. UEFI - Boot Menu==
-#Change to the '''Boot''' menu; Set '''Boot Mode Select''' to '''UEFI'''
+#Change to the '''Boot''' menu; Set '''Boot Mode Select''' to '''UEFI'''.
 #:[[File:UEFI_Gen2_Supermicro_Boot_Menu_Boot_Mode_Select.jpg|580px]]
-#Change to '''Save & Exit''' menu, then select '''Save Changes and Reset''' and press enter
+#Change to '''Save & Exit''' menu, then select '''Save Changes and Reset''' and press enter.
 #Select '''Yes''' at the prompt and press enter.
 #:[[File:UEFI_Gen2_Supermicro_Save_And_Exit_Prompt.jpg|580px]]
@@ Line 70: / Line 70: @@
 # Watch for the screen with the Supermicro logo and boot options underneath it. Press F11 a couple of times, once the options are listed.
 #:[[File:UEFI_Gen2_Supermicro_Post_Screen.png|580px]]
-#If the keypress was recognized by the system, it will print '''Invoking Boot Menu'''
+#If the keypress was recognized by the system, it will print '''Invoking Boot Menu'''.
 #:[[File:SM-33.png]]
 #In the boot menu, select the ''first partition on the USB device'' and press enter, e.g.:
@@ Line 80: / Line 80: @@
 *If using the '''non-HSM''' onboarding procedure, return to the [[IC-OS Installation Runbook#8. UEFI Setup and Boot Menu|IC-OS Installation Runbook]].
-*If using the '''legacy, HSM''' onboarding procedure, return to the [[NitroKey HSM installation runbook#8. UEFI Setup and Boot Menu|NitroKey HSM installation runbook]]
+*If using the '''legacy, HSM''' onboarding procedure, return to the [[NitroKey HSM installation runbook#8. UEFI Setup and Boot Menu|NitroKey HSM installation runbook.]]