Lenovo ThinkEdge SE350 V2 User Manual page 163

<asset_tag>
[access_method]
Set the TPM policy
By default, a replacement system board is shipped with the TPM policy set to undefined. You must modify
this setting to match the setting that was in place for the system board that is being replaced.
There are two methods available to set the TPM policy:
• From Lenovo XClarity Provisioning Manager
To set the TPM policy from Lenovo XClarity Provisioning Manager:
1. Start the server and press the key specified in the on-screen instructions to display the Lenovo
XClarity Provisioning Manager interface. (For more information, see the "Startup" section in the LXPM
documentation compatible with your server at
2. If the power-on Administrator password is required, enter the password.
3. From the System Summary page, click Update VPD.
4. Set the policy to one of the following settings.
– NationZ TPM 2.0 enabled - China only. Customers in the Chinese Mainland should choose this
setting if a NationZ TPM 2.0 adapter is installed.
– TPM enabled - ROW. Customers outside of the Chinese Mainland should choose this setting.
– Permanently disabled. Customers in the Chinese Mainland should use this setting if no TPM
adapter is installed.
Note: Although the setting undefined is available as a policy setting, it should not be used.
• From Lenovo XClarity Essentials OneCLI
Note: Please note that a Local IPMI user and password must be setup in Lenovo XClarity Controller for
remote accessing to the target system.
To set the TPM policy from Lenovo XClarity Essentials OneCLI:
1. Read TpmTcmPolicyLock to check whether the TPM_TCM_POLICY has been locked:
OneCli.exe config show imm.TpmTcmPolicyLock --override --imm <userid>:<password>@<ip_address>
The server asset tag number.
Type aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa, where aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa is
the asset tag number.
The access method that you select to access the target server.
• Online KCS (unauthenticated and user restricted):
You can directly delete [access_method] from the command.
• Online authenticated LAN:
In this case, specify below LAN account information at the end of the OneCLI
command:
--bmc-username <user_id> --bmc-password <password>
• Remote WAN/LAN:
In this case, specify below XCC account information and IP address at the end of the
OneCLI command:
--bmc <bmc_user_id>:<bmc_password>@<bmc_external_IP>
Notes:
– <bmc_user_id>
The BMC account name (1 of 12 accounts). The default value is USERID.
– <bmc_password>
The BMC account password (1 of 12 accounts).
https://pubs.lenovo.com/lxpm-overview/
.
Chapter 5 Hardware replacement procedures
.)
155