Supermicro X13SEW-TF User Manual page 76

Super X13SEW-TF/-F User's Manual
Total Memory Encryption (TME) Bypass (Available when "Memory Encryption (TME)"
is set to Enabled)
Use this feature to disable/enable the Total Memory Encryption (TME) function for physical
memory protection. The options are Auto, Disabled, and Enabled.
The following information is displayed:
•
Total Memory Encryption
•
Multi-Tenant (TME-MT)
•
Memory Integrity
•
Key Stock Amount
•
TME-MT Key ID Bits
Trust Domain Extension (TDX)
----------------------------------------------------------------
Software Guard Extension (SGX)
----------------------------------------------------------------
*The following SGX features are available when "Memory Encryption (TME)" is set
to Enabled and CPU supports Intel SGX
Note: Each memory channel must have at least one DIMM populated on the mother-
board to support the Intel SGX features.
SGX Factory Reset
Use this feature to perform an SGX factory reset to delete all registration data and force
an Initial Platform Establishment flow. Reboot the system for the change to take effect. The
options are Disabled and Enabled.
SW Guard Extensions (SGX)
Use this feature to enable Intel Software Guard Extensions (SGX) support. Intel SGX is a set
of extensions that increases the security of application code and data by using enclaves in
memory to protect sensitive information. The options are Disabled and Enabled.
SGX Package Info In-Band Access
Setting this feature to Enabled is required before BIOS provides software with the key blobs,
which are generated for each CPU package. The options are Disabled and Enabled.
SGX PRM Size (Available when "SW Guard Extensions (SGX)" is set to Enabled)
Use this feature to set the Processor Reserved Memory Range Register (PRMRR) size.
The options are 256M, 512M, 1G, 2G, 4G, 8G, 16G, 32G, 64G, and 128G.
76