Lenovo ThinkSystem SR550 Maintenance Manual

Also see for ThinkSystem SR550: Manual Manual Product guide Quick start guide Setup guide

Set the TPM/TCM policyBy default, a replacement system board is shipped with the TPM/TCM policy set to undefined. You mustmodify this setting to match the setting that was in place for the system board that is being replaced.There are two methods available to set the TPM policy:• From Lenovo XClarity Provisioning ManagerTo set the TPM policy from Lenovo XClarity Provisioning Manager:1. Start the server and press F1 to display the Lenovo XClarity Provisioning Manager interface.2. If the power-on Administrator password is required, enter the password.3. From the System Summary page, click Update VPD.4. Set the policy to one of the following settings.– TCM enabled - Chinese Mainland only. Customers in Chinese Mainland should choose thissetting if a TCM adapter is installed.– TPM 2.0 enabled - Chinese Mainland only. Customers in Chinese Mainland should choose thissetting if a TPM 2.0 adapter is installed.– TPM enabled - ROW. Customers outside of Chinese Mainland should choose this setting.– Permanently disabled. Customers in Chinese Mainland should use this setting if no TPM or TCMadapter is installed.Note: Although the setting undefined is available as a policy setting, it should not be used.• From Lenovo XClarity Essentials OneCLINote: Please note that a Local IPMI user and password must be setup in Lenovo XClarity Controller forremote accessing to the target system.To set the TPM policy from Lenovo XClarity Essentials OneCLI:1. Read TpmTcmPolicyLock to check whether the TPM_TCM_POLICY has been locked:OneCli.exe config show imm.TpmTcmPolicyLock --override --imm :@Note: The imm.TpmTcmPolicyLock value must be 'Disabled', which means TPM_TCM_POLICY isNOT locked and changes to the TPM_TCM_POLICY are permitted. If the return code is ‘Enabled’then no changes to the policy are permitted. The planar may still be used if the desired setting iscorrect for the system being replaced.2. Configure the TPM_TCM_POLICY into XCC:– For the customer in Chinese Mainland with no TCM/TPM:OneCli.exe config set imm.TpmTcmPolicy "NeitherTpmNorTcm" --override --imm :@– For the customer in Chinese Mainland that has installed TCM/TPM module on the original system(TCM/TPM module should be moved to the FRU prior to changing policy)OneCli.exe config set imm.TpmTcmPolicy "TcmOnly" --override --imm :@– For the customer outside of Chinese Mainland:OneCli.exe config set imm.TpmTcmPolicy "TpmOnly" --override --imm :@3. Issue reset command to reset system:OneCli.exe misc ospower reboot --imm :@4. Read back the value to check whether the change has been accepted:OneCli.exe config show imm.TpmTcmPolicy --override --imm :@Notes:– If the read back value is matched it means the TPM_TCM_POLICY has been set correctly.Chapter 3. Hardware replacement procedures 161