Supermicro X13SEED-F User Manual page 71

Chapter 4: UEFI BIOS
AES-NI
Select Enable to use Intel Advanced Encryption Standard (AES) New Instructions (NI) for
ensuring data security. The options are Disable and Enable.
Limit CPU PA to 46 bits
Select Enable to limit CPU physical address to 46 bits to support the older Hyper-V CPU
platform. The options are Disable and Enable.
----------------------------------------------------------------
TME, TME-MT, TDX
----------------------------------------------------------------
Memory Encryption (TME) (Available when CPU supports Intel TME)
Select Enabled for total memory encryption support to enhance memory data security. The
options are Disabled and Enabled.
Total Memory Encryption (TME) Bypass (Available when "Memory Encryption (TME)"
is set to Enabled)
Use this feature to disable/enable the Total Memory Encryption (TME) function for physical
memory protection. The options are Auto, Disabled, and Enabled.
Total Memory Encryption Multi-Tenant (TME-MT) (Available when "Memory
Encryption (TME)" is set to Enabled)
Use this feature to support tenant-provided (SW-provided) keys. The options are Disabled
and Enabled.
Memory Integrity (Available when both "Memory Encryption (TME)" and "Total
Memory Encryption Multi-Tenant (TME-MT)" are set to Enabled)
Use this feature to enable TME-MT memory integrity protection for memory transactions. The
options are Disabled and Enabled.
Key Stock Amount (Available when "Memory Encryption (TME)" is set to Enabled)
Use this feature to set the number of unique keys per system (the number of tenants per
platform). The default setting is 0.
TME-MT Key IB bits (Available when "Memory Encryption (TME)" is set to Enabled)
Use this feature to set the number of bits for each key ID. The default setting is 0.
Trust Domain Extension (TDX) (Available when CPU supports Intel TDX)
Use this feature to enable Intel Trust Domain Extension (TDX) technology support to enhance
control of data security. The options are Disabled and Enabled.
71