Lenovo ThinkSystem SR550 - Page 46

View Secure Boot Keys N/A View the details of PK(Platform Key) , KEK (Key Exchange
Key) , DB (Authorized Signature Database) and DBX
(Forbidden Signature Database).
Secure Boot Custom Policy N/A Customize PK (Platform Key), KEK (Key Exchange Key),
DB (Authorized Signature Database) and DBX (Forbidden
Signature Database).
User could enter this page when “Secure Boot Policy” is
[Custom Policy].
Trusted Platform Module (TPM 2.0)
Item
Options
Description
TPM 2.0
N/A Configure the TPM 2.0 Setup options. Click this menu to
see more information about TPM 2.0.
Update to TPM1.2 compliant
N/A
Update to TPM 1.2.
Notes:
• Change is effective after system reboot and physical
presence confirmed. You can only switch TPM
firmware 128 times.
• Click this button, a pop-up warning message will show
up to confirm the action.
• When NationZ TPM20 card is plugged in, this item will
disappear.
• Update to TPM1.2 compliant is a significant change to
the system since TPM 1.2 and 2.0 are not compatible.
All keys and encrypted data will be lost.
SHA-1 PCR Bank Enabled/Disabled Enable or Disable SHA-1 PCR Bank.
Trusted Platform Module (TPM 1.2)
Item
Options
Description
TPM 1.2
N/A Configure the TPM 1.2 Setup options. Click this menu to
see more information about TPM 1.2.
Update to TPM 2.0 compliant
N/A
Update to TPM 2.0.
Notes:
• When update TPM version to TPM 2.0 compliant, do
not boot a legacy OS due to security consideration.
Change is effective after system reboot and physical
presence confirmed. You can only switch TPM
firmware 128 times.
• Click this button, a pop-up warning message will show
up to confirm the action.
• When NationZ TPM20 card is plugged in, this item will
disappear.
• Update to TPM 2.0 compliant is a significant change to
the system since TPM 2.0 and 1.2 are not compatible.
All keys and encrypted data will be lost.
42 ThinkSystem Server with Intel Xeon SP (1st, 2nd Gen) UEFI Manual