Huawei FusionServer Pro 2488H V6 Technical White Paper page 11

Huawei FusionServer Pro 2488H V6 Server
Technical White Paper
●
●
●
●
●
●
●
●
●
●
Energy Efficiency
●
●
●
●
Issue 03 (2021-02-01)
A password is required for accessing the BIOS, ensuring system boot and
management security.
The NC-SI feature allows a network port to serve as a management port and
a service port. The NC-SI feature is disabled by default and can be enabled
through the iBMC or BIOS.
The integrated Unified Extensible Firmware Interface (UEFI) improves setup,
configuration, and update efficiency and simplifies fault handling.
Lockable server chassis panel ensures security of local data.
Chassis cover opening detection is supported to enhance security.
Intel Execute Disable Bit (EDB) function prevents certain types of malicious
buffer overflow attacks when working with a supported OS.
The Intel Converged Boot Guard & Trusted Execution Technology (Intel CBnT)
prevents malicious software attacks based on hardware, prevents the
firmware from being maliciously modified, and prevents the execution of
unauthorized boot blocks. It also allows applications to run in their own
independent space without being affected by other software running in the
system, thereby enhancing security.
The trusted platform module (TPM) and trusted cryptography module (TCM)
provide advanced encryption functions, such as digital signatures and remote
authentication.
The secure boot based on the BMC chip RoT implements level-by-level
firmware verification and builds a secure boot chain, ensuring system security.
The following requirements in NIST SP 800-147B are met:
– The BIOS firmware digital signature update mechanism is supported.
During the upgrade, the digital signature is verified to prevent
unauthorized BIOS firmware upgrade.
– The flash security protection mechanism is supported to prevent
unauthorized modification of the flash memory in the OS.
NO TE
The service port with NC-SI enabled supports the following configuration:
● Configuring any port on the OCP 3.0 network adapter or other network adapters that
support the NC-SI feature as the service port with NC-SI enabled.
● Enabling, disabling, and setting a virtual local area network (VLAN) ID for this port. The
VLAN ID is 0 and disabled by default.
● Configuring IPv4 addresses (IPv4 address, subnet mask, and gateway) and IPv6
addresses (IPv6 address, prefix length, and gateway) for this port.
The server supports 80 Plus Platinum/Titanium PSUs of different energy
efficiency levels. The PSU efficiency reaches 96% at 50% load.
Efficient voltage regulator-down (VRD) power supplies for boards minimize
the energy loss from DC/DC power conversion.
Area-based, Proportional-Integral-Derivative (PID) intelligent fan speed
adjustment and intelligent CPU frequency scaling optimize heat dissipation
and reduce overall system power consumption.
The improved thermal design with energy-efficient fans ensures optimal heat
dissipation and reduces system power consumption.
Copyright © Huawei Technologies Co., Ltd.
2 Features
4