Nvidia DGX B200 - Secure Flash of DGX B200 Firmware; Encryption; NVIDIA System Manager Security; Secure Data Deletion

NVIDIA DGX B200 User Guide
8.2.1. Secure Flash of DGX B200 Firmware
Secure Flash is implemented for the DGX B200 to prevent unsigned and unveried rmware images
from being ashed onto the system.
8.2.2. Encryption
Here is some information about encrypting the DGX B200 rmware.
The rmware encryption algorithm is AES-CBC.
▶ The rmware encryption key strength is 128 bits or higher.
▶ Each rmware class uses a unique encryption key.
▶ Firmware decryption is performed by the same agent performing the signature check or a more
trusted agent in the same COT.
8.2.3. NVIDIA System Manager Security
For information about security in NVIDIA System Management, refer to NVSM documentation page.
8.3. Secure Data Deletion
This section explains how to securely delete data from the DGX B200 system SSDs to destroy all the
stored data permanently.
This process performs a more secure SSD data deletion than merely deleting les or reformatting the
SSDs.
8.3.1. Prerequisites
You need to prepare a bootable installation medium containing the current DGX OS Server ISO image.
Refer to Reimaging the System in the NVIDIA DGX OS 7 User Guide for information on the following
topics:
▶ Obtaining the DGX OS ISO Image
▶ Booting the DGX OS ISO Image
60 Chapter 8. Security