Enabling or disabling processor AES-NI support
Procedure
1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Server Security > Processor AES-NI Support and press Enter.
2. Select a setting and press Enter.
a. Enabled—Enables AES-NI support.
b. Disabled—Disables AES-NI support.
3. Press F10.
Intel (R) TXT Support
Use this option to enable or disable Intel TXT (Trusted Execution Technology) support for servers with Intel
processors. Enabling the TXT support option automatically enables:
• All Intel processor cores
• Hyperthreading
• VT-d
• TPM
Disabling any of these features while TXT is enabled can prevent TXT from working properly.
Enabling or disabling Intel TXT support
If you are using Intel TXT, you can only use a TPM 1.2 module. TPM 2.0 is not supported when you activate
Intel TXT support. For more information on supported TPM modules, see https://www.hpe.com/h20195/v2/
GetPDF.aspx/c04939549.pdf.
Procedure
1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Server Security > Intel (R) TXT Support and press Enter.
2. Select a setting and press Enter.
a. Enabled—Enables TXT support.
b. Disabled (default)—Disables TXT support.
3. Press F10.
Secure Boot
Secure Boot is a server security feature that is implemented in the BIOS and does not require special
hardware. Secure Boot ensures that each component launched during the boot process is digitally signed and
that the signature is validated against a set of trusted certificates embedded in the UEFI BIOS. Secure Boot
validates the software identity of the following components in the boot process:
98 Enabling or disabling processor AES-NI support
To Next Page
Loading...
