Enabling The Intel Txt Feature In The Bios - Cisco UCS C3160 Installation And Service Manual

Installing or Replacing System Components
b.
c.
d.
e.
f.
Verify that TPM support is now enabled:
Step 2
a.
b.
c.
d.
e.
Step 3 Continue with

Enabling the Intel TXT Feature in the BIOS

Intel Trusted Execution Technology (TXT) provides greater protection for information that is used and
stored on the business server. A key aspect of that protection is the provision of an isolated execution
environment and associated sections of memory where operations can be conducted on sensitive data,
invisibly to the rest of the system. Intel TXT provides for a sealed portion of storage where sensitive data
such as encryption keys can be kept, helping to shield them from being compromised during an attack
by malicious code.
Reboot the server and watch for the prompt to press F2.
Step 1
When prompted, press F2 to enter the BIOS Setup utility.
Step 2
Verify that the prerequisite BIOS values are enabled:
Step 3
a.
b.
c.
•
•
d.
e.
f.
Cisco UCS C3160 Rack Server Installation and Service Guide
3-46
Log in to the BIOS Setup Utility with your BIOS Administrator password.
On the BIOS Setup Utility window, choose the Advanced tab.
Choose Trusted Computing to open the TPM Security Device Configuration window.
Change TPM SUPPORT to Enabled.
Press F10 to save your settings and reboot the server.
Watch during bootup for the F2 prompt, and then press F2 to enter BIOS setup.
Log into the BIOS Setup utility with your BIOS Administrator password.
Choose the Advanced tab.
Choose Trusted Computing to open the TPM Security Device Configuration window.
Verify that TPM SUPPORT and TPM State are Enabled.
Enabling the Intel TXT Feature in the BIOS, page
Choose the Advanced tab.
Choose Intel TXT(LT-SX) Configuration to open the Intel TXT(LT-SX) Hardware Support
window.
Verify that the following items are listed as Enabled:
– VT-d Support (default is Enabled)
– VT Support (default is Enabled)
– TPM Support
TPM State
–
If VT-d Support and VT Support are already enabled, skip to
If VT-d Support and VT Support are not enabled, continue with the next steps to enable them.
Press Escape to return to the BIOS Setup utility Advanced tab.
On the Advanced tab, choose Processor Configuration to open the Processor Configuration
window.
Set Intel (R) VT and Intel (R) VT-d to Enabled.
Chapter 3 Maintaining the System
3-46.
Step 4.
OL-32062-01