Lenovo Flex System x440 Compute Node Installation And Service Manual page 41

• Enable/Disable: select this option to enable/disable Physical Presence Policy. Default is Enable.
• Asserted: select this option to set Physical Presence for a duration (in minutes) or turn it off.
Default is De-asserted.
• Input minutes for assertion: select this option to input a number from 0~100 which stands for
the number of minutes Remote Physical Presence is asserted. Physical Presence Policy has to be
enabled before this option is available.
• Refresh assert status: select this option to view the current status of asserting.
– Rollback Configuration
Select this choice to allow (enable)/forbid(disable) rolling back to an older version of UEFI. Default is
Enable.
– Secure Boot Configuration
Select this choice to choose from the following Secure Boot options.
• Enable/Disable: select this option to enable/disable Secure Boot. Default is Disable.
• Secure Boot Mode: select this option to choose a mode of Secure Boot. Default is Standard
Mode.
– Standard Mode: standard mode of Secure Boot.
– Custom Secured Boot Mode: the following options are available in this mode:
- Display Secure Boot Option ROM error: to show a list of devices in the server that are not
signed for Secure Boot.
- PK (platform key) options: to enroll/delete PK
- KEK (Key Enrollment Key) options: to enroll/delete KEK
- DB (Signatures Database) options: to enroll/delete DB
- DBX (Revoked Signatures Database) options: to enroll/delete DBX
– Trusted Platform Module (TPM 1.2)
Select this choice to view or change the settings of TPM 1.2.
• TPM firmware version: to view current TPM firmware version.
• TPM device/state : to view current state of TPM or activate/deactivate TPM.
• Refresh TPM Status: to get the current status of TPM.
• TPM force clear: to force clearing TPM data.
– Integrated Management Module
Select this choice to view or change the settings for the integrated management module II (IMM2).
– Commands on USB Interface
Select this choice to specify whether the Ethernet over USB interface is enabled or disabled.
Notes: This option is primarily for older operating systems that have problems with USB
communications device class (CDC) Ethernet interfaces. Disabling this option will cause the
following issues:
• Online update packages will not work.
• Updates that use Bootable Media Creator (BoMC) will not work because BoMC uses the LAN
over USB interface.
• You must install the IPMI device driver to use the Advanced Settings Utility (ASU) to change the
IMM2 or UEFI configuration.
.
Chapter 2 Configuring
31