Lenovo ThinkSystem SR630 Maintenance Manual page 168

In App Direct Mode, the PMEMs that are connected to the same processor are by default interleaved
(displayed as App Direct), while memory banks are used in turns. To set them as not interleaved in the
Setup Utility, go to Intel Optane PMEMs ➙ Goals ➙ Persistent Memory Type [(PMEM mode)],
select App Direct Not Interleaved and reboot the system.
Note: Setting PMEM App Direct capacity to not interleaved will turn the displayed App Direct regions
from one region per processor to one region per PMEM.
• Regions
After the memory percentage is set and the system is rebooted, regions for the App Direct capacity will be
generated automatically. Select this option to view the App Direct regions per processor.
• Namespaces
App Direct capacity of PMEMs requires the following steps before it is truly available for applications.
1. Namespaces must be created for region capacity allocation.
2. Filesystem must be created and formatted for the namespaces in the operating system.
Each App Direct region can be allocated into one namespace. Create namespaces in the following
operating systems:
– Windows: Use powershell command. To create a namespace, use Windows Server 2019 or later
versions.
– Linux: Use ndctl command.
– VMware: Reboot the system, and VMware will create namespaces automatically.
After creating namespaces for App Direct capacity allocation, make sure to create and format filesystem
in the operating system so that the App Direct capacity is accessible for applications.
• Security
– Enable Security
Attention: By default, PMEM security is disabled. Before enabling security, make sure all the country
or local legal requirements regarding data encryption and trade compliance are met. Violation could
cause legal issues.
PMEMs can be secured with passphrases. Two types of passphrase protection scope are available for
PMEM:
– Platform: Choose this option to run security operation on all the installed PMEM units at once. A
platform passphrase is stored and automatically applied to unlock PMEMs before operating system
starts running, but the passphrase still has to be disabled manually for secure erase.
Alternatively, enable/disable platform level security with the following commands in OneCLI:
• Enable security:
1. Enable security.
OneCli.exe config set IntelOptanePMEM.SecurityOperation "Enable Security"
--bmc USERID:PASSW0RD@10.104.195.86
2. Set the security passphrase.
OneCli.exe config set IntelOptanePMEM.SecurityPassphrase "123456"
--bmc USERID:PASSW0RD@10.104.195.86
Where 123456 stands for the passphrase.
3. Reboot the system.
• Disable security:
ThinkSystem SR630 V2 Maintenance Manual
158