Cisco UCS C24 Installation And Service Manual page 109

Chapter 3 Maintaining the Server
Verify that a TPM is now installed and enabled in the server:
Step 1
Either attach a VGA monitor and USB keyboard to the server, or log in remotely to the CIMC
a.
interface of the server and open a virtual KVM console window.
Reboot the server.
b.
Watch during bootup for the F2 prompt, and then press F2 to enter BIOS setup.
c.
Log in to the BIOS Setup utility with your BIOS Administrator password.
d.
Note
Select the Advanced tab.
e.
On the Advanced tab, select Trusted Computing to open the TPM Security Device Configuration
f.
screen.
Verify that TPM SUPPORT is Enabled. If it is not, set TPM SUPPORT to Enabled.
g.
Press Escape to return to the BIOS Setup utility Advanced tab.
h.
Enable the Intel Trusted Execution Technology (TXT) feature:
Step 2
On the Advanced tab, select Intel TXT(LT-SX) Configuration to open the Intel TXT(LT-SX)
a.
Hardware Support screen.
Note
Set TXT Support to Enabled.
b.
On the same screen, verify that the Intel Virtualization Technology (VT) and the Intel VT for Directed
Step 3
I/O (VT-d) features are enabled (the factory default).
On the Intel TXT(LT-SX) Hardware Support screen, verify that VT-d Support and VT Support are
a.
both listed as Enabled.
–
–
Press Escape to return to the BIOS Setup utility Advanced tab.
b.
On the Advanced tab, select Processor Configuration to open the Processor Configuration screen.
c.
Set Intel (R) VT and Intel (R) VT-d to Enabled.
d.
Press F10 to save your changes and exit the BIOS Setup utility.
Step 4
Step 5 Verify that the Intel TXT, VT, and VT-d features are enabled:
a. Reboot the server.
Watch during bootup for the F2 prompt, and then press F2 to enter BIOS setup.
b.
c. Select the Advanced tab.
d. Select Intel TXT(LT-SX) Configuration and verify that TXT Support, VT-d Support, and VT
Support are Enabled.
OL-25761-01z
You must be logged in as the BIOS administrator to perform this procedure. If you have not done
so already, set a BIOS administrator password on the Security tab of the BIOS Setup utility.
The Intel Trusted Execution Technology feature can be enabled only when the server has a TPM
installed on the TPM header.
If they are already enabled, skip to
If VT-d Support and VT Support are not enabled, continue with the next steps to enable them.
Replacing a Cisco Flexible Flash Card
Step 4.
Cisco UCS C240 Server Installation and Service Guide
3-69