Lenovo ThinkSystem ST650 V2 - Memory Configuration; Enable Software Guard Extensions (SGX)

• Lenovo XClarity Administrator
You can quickly provision and pre-provision all of your servers using a consistent configuration.
Configuration settings (such as local storage, I/O adapters, boot settings, firmware, ports, and Lenovo
XClarity Controller and UEFI settings) are saved as a server pattern that can be applied to one or more
managed servers. When the server patterns are updated, the changes are automatically deployed to the
applied servers.
Specific details about updating firmware using Lenovo XClarity Administrator are available at:
http://sysmgt.lenovofiles.com/help/topic/com.lenovo.lxca.doc/server_configuring.html
• Lenovo XClarity Controller
You can configure the management processor for the server through the Lenovo XClarity Controller Web
interface or through the command-line interface.
For information about configuring the server using Lenovo XClarity Controller, see:
http://sysmgt.lenovofiles.com/help/topic/com.lenovo.systems.management.xcc.doc/NN1ia_c_
manageserverfirmware.html
Memory configuration
Memory performance depends on several variables, such as memory mode, memory speed, memory ranks,
memory population and processor.
More information about optimizing memory performance and configuring memory is available at the Lenovo
Press website:
https://lenovopress.com/servers/options/memory
In addition, you can take advantage of a memory configurator, which is available at the following site:
http://1config.lenovo.com/#/memory_configuration
For specific information about the required installation order of memory modules in your server based on the
system configuration and memory mode that you are implementing, see “Technical rules for memory
modules” in the ThinkSystem ST650 V2 Setup Guide.
Enable Software Guard Extensions (SGX)
Intel
®
Software Guard Extensions (Intel
®
SGX) operates under the assumption that the security perimeter
includes only the internals of the CPU package, and leaves the DRAM untrusted.
Complete the following steps to enable SGX.
Note: Make sure you follow the memory module population sequence for SGX configurations in
“Independent memory mode” on page 63.
Step 1. Restart the system. Before the operating system starts up, press F1 to enter the Setup Utility.
Step 2. Go to System settings ➙ Processors ➙ UMA-Based Clustering and disable the option.
Step 3. Go to System settings ➙ Processors ➙ Total Memory Encryption (TME) and enable the option.
Step 4. Save the changes, then go to System settings ➙ Processors ➙ SW Guard Extension (SGX) and
enable the option.
Chapter 5. System configuration 157