Configure Security Settings - Lenovo ThinkSystem SR635 Maintenance Manual

Configure security settings

Use this section to configure security settings after the system board is replaced.
Security setting
features
Physical presence
assertion 1
TPM policy setting &
locking
TPM version toggling
1. Support physical assertion through hardware jumper only.
2. Optional by server models and UEFI firmware levels. For details, see (Optional) Toggle the TPM version.
3. TPM chips shipped to Chinese Mainland do not support version toggling between 1.2 and 2.0. Only TPM 2.0 is
supported.
• "(Required) Assert Physical Presence" on page 199
• "(Required) Set the TPM policy" on page 200
• "(Optional) Toggle the TPM version" on page 202
• "(Optional) Enable UEFI Secure Boot" on page 203
(Required) Assert Physical Presence
You can assert hardware Physical Presence through a jumper on the system board.
For details of the jumper, see "System board jumpers" on page 26.
Outside Chinese Mainland
7002 CPU 7003 CPU
Required Required
Required Required
Optional 2 Optional
Chinese Mainland
7002 CPU
Required
Required
2
NA 3
.
Chapter 3 Hardware replacement procedures
7003 CPU
Required
Required
NA 3
199