IC-OS Installation - UEFI Configuration - Gen2 Supermicro

1. UEFI - Enter Setup

1. Reboot or power on the server.
2. Watch for the screen with the Supermicro logo and boot options underneath it. Press DEL (delete) a couple of times, once the options are listed.

   

3. If your option is recognized by the system, it will say: "Entering Setup…"

2. UEFI - Check Version

1. Check the version number at the bottom of the screen. Ensure the UEFI/BIOS version is 2.21.1280 or higher. This version was tested and found to support features required for IC-OS.
   • Is your version lower than 2.21.1280? Download the latest version and follow the included instructions at the Supermicro support site

3. Restore Optimized Defaults

• Select "Restore Optimized Defaults" from the Save & Exit menu before makimg the changes below.
• Save changes

4. UEFI - Advanced Settings

1. Change to the Advanced menu. Then, select Boot Feature and press enter.

   

2. Set Wait For "F1" If Error to Disabled; press ESC (escape) to return to previous menu.

   

3. Select ACPI Settings and press enter.

   

4. Set PCI AER Support to Enabled; set NUMA Nodes Per Socket to NPS0; press ESC (escape) to return to previous menu.

   

5. Select CPU Configuration and press enter.

   

6. Set SMT Control to Enabled.
7. Set SMEE to Enabled.
8. Set SEV ASID Count to 253 ASIDs.
9. Set SEV-ES ASID Space Limit Control to Manual.
10. Set SEV-ES ASID Space Limit to 100.
11. Set SNP Memory (RMP Table) Coverage to Enabled.
12. Set SVM Mode to Enabled.

    

13. Press ESC (escape) to return to previous menu.
14. Select NB Configuration and press enter.

    

15. Set SEV-SNP Support to Enabled.

    

16. Select xGMI Configuration and press enter.

    

17. Set xGMI Max Speed to 22Gbps; press escape to return to the previous menu.

    

18. Select Memory Configuration and press enter.

    

19. Set TSME to Disabled.

    

20. Press ESC twice (escape) to return to the Advanced main menu.
21. Select PCIe/PCI/PnP Configuration and press enter.

    

22. Set SR-IOV Support to Enabled.

    

23. Select Trusted Computing.

    

24. Set Security Device Support to Enabled.
25. Set SHA256 PCR Bank to Enabled.
26. Set Platform Hierarchy to Enabled.
27. Set Storage Hierarchy to Enabled.
28. Set Endorsement Hierarchy to Enabled.

    

5. UEFI - Boot Menu

1. Change to the Boot menu; Set Boot Mode Select to UEFI.

   

2. Change to Save & Exit menu, then select Save Changes and Reset and press enter.
3. Select Yes at the prompt and press enter.

   

The system will now reboot. Please do not unplug the IC-OS USB stick at this point.

6. Boot the IC-OS USB image

1. Watch for the screen with the Supermicro logo and boot options underneath it. Press F11 a couple of times, once the options are listed.

   

2. If the keypress was recognized by the system, it will print Invoking Boot Menu.

   

3. In the boot menu, select the first partition on the USB device and press enter, e.g.:

   

Return to the Installation Runbook

• If using the non-HSM onboarding procedure, return to the IC-OS Installation Runbook.

• If using the legacy, HSM onboarding procedure, return to the NitroKey HSM installation runbook.