Asserting Tpm Physical Presence; Setting The Tpm Version - Intel R2600SR Series Setup And Service Manual

3.11.5

Asserting TPM Physical Presence

Before asserting TPM Physical Presence, enable the Physical Presence Policy. By default, the Physical
Presence Policy is enabled with a timeout of 30 minutes.
 If the TPM Physical Presence Policy is enabled, assert TPM Physical Presence through the BMC or
hardware jumpers on the system board.
 If the TPM Physical Presence Policy has been disabled, set the hardware TPM Physical Presence
jumper on the system board to assert Physical Presence. Enable the Physical Presence Policy using F1
(UEFI Settings).
3.11.5.1 Asserting TPM Physical Presence through the BMC
Complete the following steps to assert TPM Physical Presence through the BMC:
1. Log in to the BMC interface.
2. Click BMC Configuration ➙ Security and verify that Physical Presence is set to assert.
3.11.5.2 Asserting TPM Physical Presence through the Hardware
Hardware Physical Presence is also asserted through the use of a jumper on the system board. For more
information about asserting hardware Physical Presence through the use of a jumper, see Section 2.1.3.2.
3.11.6

Setting the TPM Version

Before the TPM version is set, TPM Physical Presence must be asserted. Set the TPM version through these
steps:
1. Download and install OneCLI.
a. Go to http://downloadcenter.intel.com/
b. Click Drivers & Software.
c. Navigate to the version of OneCLI for the operating system and download the package.
2. Run one of the following commands to set the TPM version:
3.11.6.1 Using OneCli to Set the TPM version to Version 2.0
OneCli.exe config set TPMVersion.TPMVersion "Update to TPM2.0 compliant" –v –
override –host<ip_address>
--user <userid> --password <password>
3.11.6.2 Using OneCli to Set the TPM version to Version 1.2
OneCli.exe config set TPMVersion.TPMVersion "Update to TPM1.2 compliant" –v –
override –host<ip_address>
--user <userid> --password <password>
where:
<userid>:<password> are the credentials used to access the BMC of the server. The default user ID
is USERID, and the default password is PASSW0RD (zero, not an uppercase o)
<ip_address> is the IP address of the BMC.
48
Intel® Server System R2600SR Setup and Service Guide
and navigate to the support page for the server.