Signing; Nvsm Security; Secure Data Deletion; Prerequisite - Nvidia DGX A100 User Manual

Firmware decryption is performed either by the same agent that performs signature check

or a more trusted agent in the same COT
13.2.1.2

Signing

The firmware signature is validated upon each boot of the DGX A100.

This is not implemented for the Power Supply and support controllers on the DGX A100.
The firmware signature is validated on every update before the firmware image is updated

in non-volatile storage.
13.2.1.3

NVSM Security

See "Configuring NVSM Security".
13.3

Secure Data Deletion

This section explains how to securely delete data from the NVIDIA DGX A100 system SSDs to
permanently destroy all the data that was stored there. This performs a more secure SSD data
deletion than merely deleting files or reformatting the SSDs.
13.3.1

Prerequisite

Prepare a bootable installation medium that contains the current DGX OS Server ISO image.
See:
"Obtaining the DGX A100 Software ISO Image and Checksum File"

"Creating a Bootable Installation Medium"

13.3.2

Instructions

Boot the system from the ISO image, either remotely or from a bootable USB key.
1.
At the GRUB menu, select:
2.
(For DGX OS 4): 'Rescue a broken system' and configure the locale and network
•
information.
(For DGX OS 5): 'Boot Into Live Environment' and configure the locale and network
•
information.
When asked to choose a root file system, choose
3.
'Do not use a root file system'
and then
'Execute a shell in the installer environment'
Log in.
4.
DGX A100 System
Security
DU-09821-001_v06 | 76