Lenovo ThinkSystem SR645 - Enable UEFI Secure Boot

Step 1. Start the server and when prompted, press F1 to display Lenovo XClarity Provisioning Manager V3.
Step 2. If the power-on Administrator password is required, enter the password.
Step 3. From the System Summary page, click Update VPD.
Step 4. Set the policy to one of the following settings.
• NationZ TPM 2.0 enabled - China only. Customers in the Chinese Mainland should choose this
setting if a NationZ TPM 2.0 adapter is installed.
• TPM enabled - ROW. Customers outside of the Chinese Mainland should choose this setting.
• Permanently disabled. Customers in the Chinese Mainland should use this setting if no TPM
adapter is installed.
Although the setting undefined is available as a policy setting, it should not be used.
Assert Physical Presence
Before you can assert Physical Presence, the Physical Presence Policy must be enabled. By default, the
Physical Presence Policy is enabled with a timeout of 30 minutes.
If the Physical Presence Policy is enabled, you can assert Physical Presence through hardware jumpers on
the system board.
Notes: If the Physical Presence Policy has been disabled:
1. Set the hardware Physical Presence jumper on the system board to assert Physical Presence.
2. Enable the Physical Presence Policy using F1 (UEFI Settings).
Assert Physical Presence through the hardware
You can also assert hardware Physical Presence through the use of a jumper on the system board. For more
information about asserting hardware Physical Presence through the use of a jumper, see: Switch block and
jumper.
Enable UEFI Secure Boot
Optionally, you can enable UEFI Secure Boot.
Physical Presence must be asserted if you are going to enable UEFI Secure Boot. See Assert Physical
Presence.
You can enable UEFI Secure Boot from UEFI System Setup interface. To enable UEFI Secure Boot from
System Setup interface:
1. Start the server and when prompted, press F1 to display System Setup interface.
2. From the UEFI Setup page, click Security ➙ Secure Boot.
3. Enable Secure Boot and save the settings.
236
ThinkSystem SR645 Maintenance Manual