Supermicro SuperServer SYS-122H-TN User Manual page 198

When this feature has previously been set to Enabled, the options are Enabled, Reset, and
Key Rotation. Set this feature to Key Rotation to obtain an existing AK from the KMS server and
create a new AK. To disable the KMS Security Policy, set this feature to Reset. When this
feature is set to Reset, the system and TCG NVMe devices chosen in "Super- Guardians
Protection Policy" will be in the unprotected mode.
Notes:
Be sure that the KMS server is ready before configuring this feature.
l
Use the professional KMS server solutions (e.g., Thales Server) or the Supermicro
l
PyKMIP Software Package to establish the KMS server.
KMS Server Retry Count (Available when "TPM Security Policy" and "USB Security
Policy" are set to Disabled)
Use this feature to specify how many times the system will attempt reconnecting to the KMS
server. The valid range is 0–10. Press the <+> or <-> key on your keyboard to change the
value. The default setting is 5. If the value is 0, the system will retry infinitely.
TPM Security Policy (Available when "KMS Security Policy" and "USB Security Policy"
are set to Disabled)
Set this feature to Enabled to enable the TPM Security Policy. When this feature has not
previously been set to Enabled, the options are Disabled and Enabled. Changes take effect
after you save settings and reboot the system.
When this feature has previously been set to Enabled, the options are Enabled and Reset. To
disable the TPM Security Policy, set this feature to Reset. When this feature is set to reset, the
system and TCG NVMe devices chosen in "Super-Guardians Protection Policy" will be in the
unprotected mode.
Note: Be sure to install a TPM 2.0 device to your system before configuring this feature.
Load Authentication- Key (Available when "KMS Security Policy," "TPM Security
Policy," and "USB Security Policy" are set to Disabled)
The options are Disabled and Enabled. Set this feature to Enabled. Changes take effect after
you save settings and reboot the system. While booting, the BIOS will automatically load the
Authentication-Key (filename: TPMAuth.bin) from the USB flash drive. Afterwards, the default
setting will be set to Disabled by the BIOS.
SuperServer SYS-122H-TN: UEFI BIOS
198