HP ProLiant Gen10 - Changing Server Security Settings

To Next Page

To Previous Page

Changing Server Security settingsChanging Server Security settings

ProcedureProcedure

From the System Utilities screen, select System Configuration > BIOS/Platform Configuration (RBSU) > Server Security.

Changing Server Security settings 308

Main Page

Table of Contents3
Getting Started13
UEFI System Utilities14
What Is UEFI15
UEFI System Utilities Overview16
Launching the System Utilities17
Navigating the System Utilities18
Navigating the System Utilities in GUI Mode19
UEFI System Utilities GUI20
System Utilities Key Functions21
When Is a Reboot Required22
System Utilities Menu Overview23
Common Setup and Configuration Faqs24
Updating Firmware or System ROM26
System Utilities Main Menu Options27
System Configuration28
System Configuration Menu Options29
Bios/Platform Configuration (RBSU)30
Using the Ilo 5 Configuration Utility31
Ilo 5 Configuration Utility Options32
Network Options33
Configuring Network Options34
Advanced Network Options35
Configuring Advanced Network Options36
User Management37
Add User38
Adding New User Accounts39
Edit/Remove User40
Editing or Removing User Accounts41
Setting Options42
Configuring Access Settings43
Set to Factory Defaults44
Resetting Ilo to the Factory Default Settings45
Reset Ilo46
Resetting Ilo Active Connections47
About48
Viewing Information about Ilo49
Viewing and Configuring Embedded Device Information50
Viewing Controller Information51
Configuring Controller Settings52
Modifying Controller Settings53
Modifying Advanced Controller Settings55
Clearing the Controller Configuration56
Viewing the Backup Power Source Status57
Managing Power Settings58
Configure Arrays59
Creating an Array Using UEFI System Utilities60
Viewing Logical Drive Properties61
Creating a Logical Drive62
Assigning Spare Drives63
Deleting a Spare Drive64
Identifying a Device65
Deleting an Array66
Editing a Logical Drive67
Deleting a Logical Drive68
Disk Utilities69
Viewing Disk Device Information70
Identifying a Disk Device71
Setting Bootable Devices for Legacy Boot Mode72
Setting the Primary and Secondary Bootable Devices (Legacy Boot Mode)73
Setting the Number of os Bootable Drives (Legacy Boot Mode)74
Viewing and Configuring NIC and Fcoe Settings75
One-Time Boot Menu76
One-Time Boot Menu Options77
Selecting an Option for a One-Time Boot78
Embedded Applications79
Launching the Embedded UEFI Shell80
Viewing or Clearing the Integrated Management Log81
Downloading Active System Health Data82
Downloading an Active Health System Log83
Logging in to Active Health System Viewer84
Uploading an AHS Log to AHSV85
Embedded Diagnostics86
Launching Embedded Diagnostics87
Launching Intelligent Provisioning88
Launching Embedded Ipxe89
System Information and System Health90
System Information91
Viewing System Information92
Viewing System Health93
Rebooting the System, Selecting a Language, and Setting the Browser Mode94
Rebooting the System95
Exiting and Resuming System Boot96
Rebooting the System97
Selecting a Language and Browser Mode98
Selecting a System Language99
Selecting a Browser Mode100
Bios/Platform Configuration Options101
What's New in Gen10 Plus Snap 4102
Workload Profiles and Performance Options104
Workload Matching106
Workload Profiles Dependencies Overview107
Workload Profile Dependencies for Intel® Xeon® Scalable Processors108
Workload Profile Dependencies for 1St and 2Nd Gen AMD EPYC™ Processors111
Applying a Workload Profile113
Changing Dependent Options after Applying a Profile114
Changing System Options115
Configuring Boot Time Optimizations116
Setting Dynamic Power Capping Functionality117
Enabling or Disabling Extended Memory Test118
Enabling or Disabling Memory Fast Training119
Setting the UEFI POST Discovery Mode120
Enabling or Disabling Memory Clear on Warm Reset121
Configuring Serial Port Options122
Assigning an Embedded Serial Port123
Assigning a Virtual Serial Port124
Mirroring Serial Console to a USB Port125
Configuring USB Options126
Setting USB Control127
Enabling or Disabling USB Boot Support128
Selecting the Removable Flash Media Boot Sequence129
Enabling or Disabling the Internal SD Card Slot130
Configuring the IOS Serial Console and EMS131
Enabling or Disabling the BIOS Serial Console Port132
Selecting the BIOS Serial Console Emulation Mode133
Setting the BIOS Serial Console Baud Rate134
Configuring EMS Console Port Settings135
Configuring Server Availability136
Enabling or Disabling ASR137
Setting the ASR Timeout138
Enabling or Disabling Wake-On LAN139
Setting the POST F1 Prompt Delay140
Enabling or Disabling Momentary Power Button Functionality141
Setting the Automatic Power-On State142
Setting the Power-On Delay143
Setting the POST ASR144
Setting the POST ASR Timer145
Enabling or Disabling the IPMI Watchdog Timer146
Setting the IPMI Watchdog Timer Timeout147
Setting the IPMI Watchdog Timer Policy148
Viewing and Entering Server Asset Information149
Entering Server Information150
Entering Administrator Information151
Entering Service Contact Information152
Entering a Custom POST Message153
Changing Processor Options154
Enabling or Disabling Intel Hyperthreading155
Configuring Intel SGX Control Options156
Setting the Number of Enabled Processor Cores157
Enabling or Disabling Processor X2Apic Support158
Enabling AMD Simultaneous Multithreading (SMT)159
Configuring Performance Determinism Options160
Selecting AMD Page Table Entry Speculative Lock Scheduling Options161
Changing Memory Options162
Configuring Memory Remapping163
Configuring Advanced Memory Protection164
Configuring the Memory Refresh Rate165
Configuring DRAM Burst Refresh Mode166
Enabling or Disabling Channel Interleaving167
Configuring IMC Interleaving168
Configuring AMD Interleaving169
Setting Memory Interleave Size170
Enabling or Disabling Memory Pstates171
Configuring AMD Remap 1TB172
Configuring AMD Periodic Directory Rinse173
Setting the Maximum Memory Bus Frequency174
Enabling or Disabling Memory Patrol Scrubbing175
Enabling or Disabling Node Interleaving176
Configuring AMD Secure Memory Encryption177
Enabling or Disabling Transparent Secure Memory Encryption178
Configuring the Memory Mirroring Mode179
Configuring Opportunistic Self Refresh180
Configuring Persistent Memory181
Creating Namespaces Using UEFI System Utilities182
Changing HPE Persistent Memory Module Passwords183
Viewing the Status of HPE Persistent Memory Modules184
Changing Performance Options Using UEFI System Utilities185
Sanitization with UEFI System Utilities186
Changing the Key Management Mode187
Disabling Key Management188
Disabling Encryption for a HPE Persistent Memory Module189
Configuring NVDIMM-N Options190
NVDIMM-N Support191
NVDIMM-N Sanitize/Erase on Next Reboot Policy192
NVDIMM-N Interleaving193
Enabling or Disabling Memory Configuration Violation Reporting194
Enabling or Disabling Total Memory Encryption (TME)195
Changing Virtualization Options196
Enabling or Disabling Virtualization Technology197
Enabling or Disabling Intel VT-D198
Enabling or Disabling Access Control Service199
Enabling or Disabling SR-IOV200
Setting the Minimum SEV ASID201
Setting the Maximum SEV ASID202
Enabling AMD Virtualization Options203
Enabling AMD Virtualization Technology204
Changing Boot Options205
Selecting the Boot Mode206
Enabling or Disabling UEFI Optimized Boot207
Setting the Boot Order Policy208
Changing the UEFI Boot Order List209
Controlling the UEFI Boot Order210
Adding a Boot Option to the UEFI Boot Order List211
Deleting Boot Options from the UEFI Boot Order List212
Changing the Legacy BIOS Boot Order List213
Changing Network Options214
Network Boot Options215
Setting the Pre-Boot Network Environment216
Setting the Ipv6 DHCP Unique Identifier Method217
Enabling or Disabling Network Boot Retry Support218
Enabling or Disabling Network Boot for a NIC219
Enabling or Disabling Pcie Slot Network Boot220
Setting HTTP Support221
Enabling Iscsi Policy (Gen10) or Software Initiator (Gen10 Plus)222
Configuring Pre-Boot Network Settings223
Pre-Boot Network Settings224
Prerequisites for Boot from URL225
Iscsi Boot Configuration226
Adding an Iscsi Initiator Name227
Adding an Iscsi Boot Attempt228
Deleting Iscsi Boot Attempts229
Viewing and Modifying Iscsi Boot Attempt Details230
Configuring VLAN Configuration231
Changing Embedded Ipxe Options232
Enabling or Disabling the Embedded Ipxe233
Adding the Embedded Ipxe to the UEFI Boot Order List234
Enabling or Disabling Automatic Execution of the Embedded Ipxe Startup Script235
Enabling or Disabling Embedded Ipxe Script Verification236
Setting the Embedded Ipxe Startup Script Location237
Setting the Network Location for the Embedded Ipxe Auto-Start Script238
Changing Storage Options239
Enabling Embedded Chipset SATA Controller Support240
Enabling SATA Secure Erase241
Setting the Embedded Storage Boot Policy243
Setting the Pcie Storage Boot Policy244
Changing the Default Fibre Channel/Fcoe Scanning Policy245
Enabling or Disabling Embedded NVM Express Option ROM246
Configuring Intel® CPU VMD Support247
Configuring Intel® PCH VMD Support248
Configuring Intel® VROC Support249
Decommissioning NVM Express Drives250
Changing Power and Performance Options251
Enabling or Disabling AMD Performace Workload Profile252
Setting the Power Regulator Mode253
Configuring PCI Peer to Peer Serialization254
Configuring IO Direct Cache255
Setting the Minimum Processor Idle Power Core C-State256
Setting the Minimum Processor Idle Power Package C-State257
Enabling or Disabling AMD Data Fabric C-State258
Enabling or Disabling Intel Turbo Boost Technology259
Configuring AMD Core Performance Boost260
Enabling or Disabling AMD Fmax Boost Limit Control261
Changing the AMD C-State Efficiency Mode262
Setting the Energy/Performance Bias263
Setting the AMD Infinity Fabric Performance State264
Enabling or Disabling Collaborative Power Control265
Configuring AMD XGMI Force Link Width266
Configuring AMD XGMI Max Link Width267
Setting Intel DMI Link Frequency268
Configuring AMD Preferred IO Bus Number269
Configuring AMD NBIO LCLK DPM Level270
Setting NUMA Group Size Optimization271
Enabling or Disabling Intel Performance Monitoring Support272
Configuring Uncore Frequency Scaling273
Setting UPI Bandwidth Optimization (RTID)274
Enabling or Disabling Sub-NUMA Clustering275
Enabling or Disabling the Energy Efficient Turbo Option276
Setting a Local/Remote Threshold277
Setting the LLC Dead Line Allocation278
Setting the Stale a to S279
Disabling Processor Prefetcher Options280
Enabling or Disabling I/O Options281
Enabling the ACPI SLIT Options282
Enabling Intel NIC DMA Channels Options283
Enabling or Disabling I/O Non-Posted Prefecting284
Configuring Advanced Performance Tuning Options285
Setting Direct to UPI Options286
Setting Memory Channel Mode287
Setting the Independent Channel Mode (Non-Lockstep)288
Performance Management289
Performance Management Feature Requirements290
Jitter Smoothing291
Auto Processor Jitter Control Mode292
Core Boosting293
Configuring Advanced Power Options294
Setting the Redundant Power Supply Mode295
Enabling or Disabling Infinity Fabric Power Management296
Configuring the Package Power Limit Control Mode297
Changing Embedded UEFI Shell Options298
Enabling or Disabling the Embedded UEFI Shell299
Adding the Embedded UEFI Shell to the UEFI Boot Order List300
Enabling or Disabling Automatic Execution of the Embedded UEFI Shell Startup Script301
Enabling or Disabling Shell Script Verification302
Setting the Embedded UEFI Shell Startup Script Location303
Enabling or Disabling Discovery of the Shell Auto-Start Script Using DHCP304
Setting the Network Location for the Shell Auto-Start Script305
Changing Server Security Settings308
Server Security Options309
Setting the Power-On Password310
Allowing Login with Ilo Accounts311
Setting an Administrator Password312
Secure Boot313
Enabling or Disabling Secure Boot314
Configuring Server Lock Settings315
Setting up Server Configuration Lock316
Advanced Secure Boot Options317
Viewing Advanced Secure Boot Options Settings318
Enrolling a Secure Boot Certificate Key or Database Signature319
Deleting a Secure Boot Certificate Key or Database Signature320
Deleting All Keys321
Exporting a Secure Boot Certificate Key or Database Signature322
Exporting All Secure Boot Certificate Keys323
Resetting a Secure Boot Certificate Key or Database Signature to Platform Defaults324
Resetting All Secure Boot Certificate Keys to Platform Defaults325
TLS (HTTPS) Options326
Viewing TLS Certificate Details327
Enrolling a TLS Certificate328
Deleting a TLS Certificate329
Deleting All TLS Certificates330
Exporting a TLS Certificate331
Exporting All TLS Certificates332
Resetting All TLS Settings to Platform Defaults333
Configuring Advanced TLS Security Settings334
Configuring Trusted Platform Module Options335
Setting TPM FIPS Mode Switch Operation336
Changing Advanced Security Options337
Enabling or Disabling Platform Certificate Support338
Enabling or Disabling Login with Ilo Accounts339
Enabling or Disabling Backup ROM Image Authentication340
Enabling or Disabling the One-Time Boot Menu (F11 Prompt)341
Enabling or Disabling Intelligent Provisioning (F10 Prompt)342
Changing Advanced Options343
Selecting a ROM Image344
Configuring an Embedded Video Connection345
Configuring Power Supply Requirements Override346
Enabling or Disabling Consistent Device Naming347
Enabling or Disabling Mixed Power Supply Reporting348
Changing the POST Video Support Settings349
Configuring the Platform RAS Policy350
Configuring SCI RAS Support351
Enabling or Disabling High Precision Event Timer (HPET) ACPI Support352
Changing UEFI Power Supply Requirements353
Setting the Thermal Configuration354
Enabling or Disabling Thermal Shutdown355
Setting Fan Installation Requirements Messaging356
Setting the Fan Failure Policy357
Enabling or Disabling Higher Ambient Temperature Support358
Re-Entering a Serial Number359
Re-Entering a Product ID360
Configuring Advanced Debug Options361
Obtaining UEFI Serial Output Log Data with the UEFI System Utilities362
Enabling or Disabling Intel TXT Support363
Enabling or Disabling Intel(R) Software Guard Extensions (SGX)364
Enabling or Disabling SGX Package Info In-Band Access365
Enabling or Disabling the One-Time Boot Menu F11 Prompt366
Enabling or Disabling the Intelligent Provisioning F10 Prompt367
Enabling or Disabling Processor AES-NI Support368
Enabling or Disabling Backup ROM Image Authentication369
Changing Pcie Device Configuration Options370
Selecting Advanced Pcie Device Settings371
Configuring Pcie Bifurcation Options372
Setting GPU Configurations373
Selecting Pcie Bifurcation Options374
Setting Maximum PCI Express Speed375
Configuring Nvme Pcie Resource Padding376
Configuring Pcie Slot to Processor Mapping377
Enabling or Disabling Pcie Device Isolation Support378
Configuring Pcie Error Control379
Configuring Specific Pcie Devices380
Setting the Date and Time381
Changing Backup and Restore Settings382
Resetting System Defaults383
Restoring Default System Settings384
Restoring Default Manufacturing Settings385
Changing the Default UEFI Device Priority386
Saving or Erasing User Default Options387
Using Scripted Configuration Flows388
Scripted Configuration Flow389
Ilo Restful API Support for UEFI390
Configuration Replication Utility (CONREP)391
HPE Smart Storage Administrator (HPE SSA)392
Troubleshooting393
Cannot Boot Devices394
Cannot Restore System Defaults395
Cannot Download the File in the Network Boot URL396
Cannot Network Boot with the Downloaded Image File397
Cannot Deploy from the UEFI Shell Script398
Cannot Execute Option ROM for One or more Devices399
Cannot Find a New Network or Storage Device in the Boot Order List400
Intel TXT Is Not Working Properly401
Invalid Server Serial Number and Product ID402
Invalid Time or Date403
Networking Devices Are Not Functioning Properly404
System Unresponsive405
Single Device Failure406
Server will Not Boot407
Smart Array Controllers Are Not Functioning Properly408
Vmware Not Booting in UEFI Mode409
Websites410
Support and Other Resources411

HP ProLiant Gen10 - Changing Server Security Settings

Table of Contents

Related product manuals