Lenovo ThinkSystem SR645 V3 User Manual page 149

4. Update the UEFI firmware to the specific version supported by the server. See
and RoT security module
5. If there is a software (SW) key, for example, XCC FoD key, installed in the system, inject the key again to
ensure that the key functions properly. See
Note: If you need to replace the processor board together with the firmware and RoT security module,
update the VPD before injecting the key. See
6. Optionally, do the following if needed:
• Disable or enable TPM. See
• Update the TPM firmware. See
• Enable UEFI Secure Boot. See
Disable/enable TPM
TPM is enabled by default to encrypt data transfer for system operation. Optionally, you can disable TPM
using Lenovo XClarity Essentials OneCLI.
To disable TPM, do the following:
1. Download and install Lenovo XClarity Essentials OneCLI.
To download Lenovo XClarity Essentials OneCLI, go to the following site:
https://datacentersupport.lenovo.com/solutions/HT116433
2. Run the following command:
OneCli.exe config set TrustedComputingGroup.HideTPMfromOS "Yes" --imm <userid>:<password>@<ip_address>
--override
where:
• <userid>:<password> are the credentials used to access the BMC (Lenovo XClarity Controller
interface) of your server. The default user ID is USERID, and the default password is PASSW0RD
(zero, not an uppercase o)
• <ip_address> is the IP address of the BMC.
Example:
3. Reboot the system.
If you want to enable TPM again, run the following command and reboot the system:
OneCli.exe config set TrustedComputingGroup.HideTPMfromOS "No" --imm <userid>:<password>@<ip_address> --override
Example:
.
Using Lenovo Features on
Update the Vital Product Data
"Disable/enable TPM" on page
"Update the TPM firmware" on page
"Enable UEFI Secure Boot" on page
Tip for replacing a firmware
Demand.
(VPD).
139.
140.
140.
.
Chapter 5 Hardware replacement procedures
139