Lenovo ThinkSystem SR665 V3 User Manual page 263

Watch the procedure on YouTube
Hide/observe TPM
TPM is enabled by default to encrypt data transfer for system operation. Optionally, you can disable TPM
using Lenovo XClarity Essentials OneCLI.
To disable TPM, do the following:
1. Download and install Lenovo XClarity Essentials OneCLI.
To download Lenovo XClarity Essentials OneCLI, go to the following site:
https://datacentersupport.lenovo.com/solutions/HT116433
2. Run the following command:
OneCli.exe config set TrustedComputingGroup.HideTPMfromOS "Yes" --imm <userid>:<password>@<ip_address>
--override
where:
• <userid>:<password> are the credentials used to access the BMC (Lenovo XClarity Controller
interface) of your server. The default user ID is USERID, and the default password is PASSW0RD
(zero, not an uppercase o)
• <ip_address> is the IP address of the BMC.
Example:
3. Reboot the system.
If you want to enable TPM again, run the following command and reboot the system:
OneCli.exe config set TrustedComputingGroup.HideTPMfromOS "No" --imm <userid>:<password>@<ip_address> --override
Example:
Update the TPM firmware
Optionally, you can update the TPM firmware using Lenovo XClarity Essentials OneCLI.
Note: TPM firmware update is irreversible. After update, the TPM firmware cannot be downgraded to earlier
versions.
.
Chapter 5 Hardware replacement procedures
253