Hewlett Packard Enterprise ProLiant m510, ProLiant m710x, ProLiant m710x-L User Manual

UEFI System Utilities User Guide for
HPE ProLiant m510, m710x, and m710x­L Server Blades in HPE Edgeline
Systems

Abstract

This guide details how to access and use the Unified Extensible Firmware Interface (UEFI)
that is embedded in the system ROM of all UEFI-based ProLiant m510, m710x, and m710x-L
server blades. It details how to access and use options provided in BIOS/Platform
Configuration menus that were formerly known as the ROM-Based Setup Utility (RBSU). This
document is for the person who installs, administers, and troubleshoots servers and storage
systems.

Part Number: 875737-003a
Published: July 2019
Edition: 1

©

Copyright 2019 Hewlett Packard Enterprise

Notices

The information contained herein is subject to change without notice. The only warranties for Hewlett
Packard Enterprise products and services are set forth in the express warranty statements accompanying
such products and services. Nothing herein should be construed as constituting an additional warranty.
Hewlett Packard Enterprise shall not be liable for technical or editorial errors or omissions contained
herein.

Confidential computer software. Valid license from Hewlett Packard Enterprise required for possession,
use, or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer
Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government
under vendor's standard commercial license.

Links to third-party websites take you outside the Hewlett Packard Enterprise website. Hewlett Packard
Enterprise has no control over and is not responsible for information outside the Hewlett Packard
Enterprise website.

Acknowledgments

Microsoft® and Windows® are either registered trademarks or trademarks of Microsoft Corporation in the
United States and/or other countries.

Intel®, Itanium®, Pentium®, Intel Inside®, and the Intel Inside logo are trademarks of Intel Corporation in
the United States and other countries.

UEFI® is a registered trademark of the UEFI Forum, Inc.

Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries.

Contents

Getting started.......................................................................................11

System Utilities main menu options................................................... 17

UEFI System Utilities.....................................................................12

What is UEFI?.................................................................................................................. 12

UEFI System Utilities overview.................................................... 13

Launching the System Utilities ........................................................................................ 13

Navigating the System Utilities ........................................................................................13

System Utilities key functions ...............................................................................14

When a reboot is required................................................................................................14

System Utilities menu overview........................................................................................14

Common setup and configuration FAQs.......................................................................... 15

System Configuration................................................................... 18

System Configuration menu options................................................................................ 18

BIOS/Platform Configuration (RBSU)...............................................................................18

Using the iLO 5 Configuration Utility................................................................................ 18

iLO 5 Configuration Utility options......................................................................... 18

Network Options....................................................................................................18

Configuring Network Options................................................................................ 19

Advanced Network Options...................................................................................19

Configuring Advanced Network Options............................................................... 20

User Management.................................................................................................20

Add User................................................................................................................20

Adding new user accounts.................................................................................... 21

Edit/Remove User................................................................................................. 21

Editing or removing user accounts........................................................................ 22

Setting Options......................................................................................................22

Configuring access settings.................................................................................. 23

Set to factory defaults............................................................................................23

Resetting iLO to the factory default settings .........................................................23

Reset iLO...............................................................................................................24

Resetting iLO active connections.......................................................................... 24

About..................................................................................................................... 24

Viewing information about iLO ..............................................................................25

Viewing and configuring embedded device information...................................................25

NIC and FCoE information.................................................................................... 25

Viewing and configuring NIC and FCoE settings...................................................25

NPAR configuration............................................................................................... 25

Enabling NPAR on a NIC.......................................................................................25

One-Time Boot Menu.................................................................... 27

3

One-Time Boot Menu options.......................................................................................... 27

Selecting an option for a one-time boot........................................................................... 27

Embedded Applications................................................................28

Embedded Applications options.......................................................................................28

Embedded UEFI Shell......................................................................................................28

Launching the Embedded UEFI Shell ............................................................................. 28

Integrated Management Log (IML)...................................................................................28

Viewing or clearing the Integrated Management Log.......................................................29

Active Health System Log................................................................................................ 29

Downloading an AHS Log ............................................................................................... 29

Embedded Diagnostics.................................................................................................... 30

Launching Embedded Diagnostics ..................................................................................30

System Information and System Health......................................31

System Information.......................................................................................................... 31

Viewing System Information.............................................................................................32

System Health..................................................................................................................32

Viewing System Information.............................................................................................32

Rebooting the system, selecting a language, and setting the

browser mode................................................................................33

Rebooting the system...................................................................................................... 33

Exit and resume system boot................................................................................ 33

Exiting and resuming system boot........................................................................ 33

Reboot the System................................................................................................33

Rebooting the system............................................................................................33

Selecting a language and browser mode.........................................................................33

Select Language................................................................................................... 33

Selecting a system language................................................................................ 34

BIOS/Platform Configuration options................................................. 35

Configuring System Options........................................................36

System Options................................................................................................................36

Serial Port Options........................................................................................................... 36

Virtual Serial Port...................................................................................................36

Assigning a Virtual Serial Port...............................................................................36

USB Console Redirection......................................................................................36

Enabling or disabling USB console redirection..................................................... 37

USB Options.....................................................................................................................37

USB Control...........................................................................................................37

Setting USB Control.............................................................................................. 37

USB Boot Support................................................................................................. 37

Enabling or disabling USB Boot Support...............................................................37

Processor Options............................................................................................................38

Intel (R) Hyperthreading Options...........................................................................38

Enabling or disabling Intel Hyperthreading ...........................................................38

Processor Core Disable.........................................................................................39

Setting the number of enabled processor cores ...................................................39

Processor x2APIC Support....................................................................................39

4

Enabling or disabling Processor x2APIC Support................................................. 39

Intel Software Guard Extensions (SGX)................................................................40

Enabling the Intel Software Guard Extensions (SGX)................................ 40

Selecting the Owner EPOCH input type.....................................................40

Setting the PRMRR size.............................................................................42

SATA Controller Options.................................................................................................. 42

Embedded SATA Configuration.............................................................................42

Enabling embedded chipset SATA controller support........................................... 43

SATA Secure Erase...............................................................................................43

Enabling SATA Secure Erase................................................................................43

Virtualization Options....................................................................................................... 44

Virtualization Technology.......................................................................................44

Enabling or disabling Virtualization Technology.................................................... 44

Intel (R) VT-d.........................................................................................................44

Enabling or disabling Intel VT-d.............................................................................44

Enabling x2APIC Opt Out (m710x and m710x-L server blades)...........................45

Boot Time Optimizations.................................................................................................. 45

Extended Memory Test..........................................................................................45

Enabling or disabling Extended Memory Test....................................................... 46

Memory Fast Training............................................................................................46

Enabling or disabling Memory Fast Training......................................................... 46

Memory Operations..........................................................................................................46

Advanced Memory Protection............................................................................... 47

Configuring Advanced Memory Protection............................................................47

Configuring Boot Options............................................................ 48

Boot Options.....................................................................................................................48

Boot Mode........................................................................................................................48

Selecting the boot mode.................................................................................................. 48

UEFI Optimized Boot........................................................................................................49

Enabling or disabling UEFI Optimized Boot .................................................................... 49

Boot Order Policy............................................................................................................. 49

Setting the boot order policy............................................................................................ 49

UEFI Boot Order...............................................................................................................50

Changing the UEFI boot order......................................................................................... 50

Advanced UEFI Boot Maintenance.................................................................................. 50

Add Boot Option.................................................................................................... 50

Adding a boot option to the UEFI Boot Order list.................................................. 51

Delete Boot Option................................................................................................ 51

Deleting boot options from the UEFI Boot Order list............................................. 51

Configuring Network Options...................................................... 52

Network Options...............................................................................................................52

Network Boot Options...................................................................................................... 52

UEFI PXE Boot Policy........................................................................................... 52

Setting the UEFI PXE Boot Policy.........................................................................52

IPv6 DHCP Unique Identifier.................................................................................53

Setting the IPv6 DHCP Unique Identifier method..................................................53

Network Boot Retry Support..................................................................................53

Enabling or disabling Network Boot Retry Support............................................... 53

Network Interface Cards (NICs)............................................................................ 54

Enabling or disabling network boot for a NIC........................................................ 54

PCIe Slot Network Boot.........................................................................................54

Enabling or disabling PCIe Slot Network Boot...................................................... 55

5

Pre-Boot Network Settings...............................................................................................55

Configuring Pre-Boot Network Settings........................................................................... 56

iSCSI Boot Configuration................................................................................................. 56

iSCSI Initiator Name..............................................................................................56

Adding an iSCSI initiator name............................................................................. 56

Add an iSCSI Boot Attempt................................................................................... 56

Adding an iSCSI boot attempt............................................................................... 56

Delete iSCSI Boot Attempts.................................................................................. 57

Deleting iSCSI boot attempts................................................................................ 57

iSCSI Attempts...................................................................................................... 57

Viewing and modifying iSCSI boot attempt details................................................57

VLAN Configuration......................................................................................................... 57

Configuring VLAN Configuration...................................................................................... 58

Configuring Storage Options....................................................... 59

Storage Options............................................................................................................... 59

Fibre Channel/FCoE Scan Policy.....................................................................................59

Changing the default Fibre Channel/FCoE scanning policy.............................................59

Embedded Storage Boot Policy....................................................................................... 59

Setting the embedded storage boot policy.......................................................................59

PCIe Storage Boot Policy.................................................................................................60

Setting the PCIe storage boot policy................................................................................60

Configuring the Embedded UEFI Shell........................................61

Embedded UEFI Shell options......................................................................................... 61

Embedded UEFI Shell......................................................................................................61

Enabling or disabling the Embedded UEFI Shell............................................................. 61

Add Embedded UEFI Shell to Boot Order........................................................................61

Adding the Embedded UEFI Shell to the UEFI Boot Order list........................................ 62

UEFI Shell Script Auto-Start.............................................................................................62

Enabling or disabling automatic execution of the Embedded UEFI Shell startup script...62

Shell Auto-Start Script Location....................................................................................... 63

Setting the Embedded UEFI Shell startup script location................................................ 63

Network Location for Shell Auto-Start Script....................................................................64

Setting the network location for the Shell auto-start script............................................... 64

Configuring Power Management................................................. 65

Power Management options............................................................................................ 65

Power Profile....................................................................................................................65

Setting a power profile..................................................................................................... 66

Power Regulator...............................................................................................................66

Setting the Power Regulator mode.................................................................................. 67

Minimum Processor Idle Power Core C-State..................................................................67

Setting the minimum processor idle power core C-State................................................. 67

Minimum Processor Idle Power Package C-State........................................................... 68

Setting the Minimum Processor Idle Power Package C-State ........................................ 68

Advanced Power Options.................................................................................................68

Energy/Performance Bias......................................................................................69

Setting the Energy/Performance Bias................................................................... 69

Maximum Memory Bus Frequency........................................................................69

Setting the maximum memory bus frequency....................................................... 69

Maximum PCI Express Speed...............................................................................70

Setting the maximum PCI Express speed.............................................................70

6

Dynamic Power Savings Mode Response............................................................ 70

Setting the dynamic power savings mode response speed.................................. 71

Collaborative Power Control..................................................................................71

Enabling or disabling collaborative power control................................................. 71

Redundant Power Supply Mode............................................................................71

Setting the redundant power supply mode............................................................72

Intel DMI Link Frequency.......................................................................................72

Setting Intel DMI Link Frequency.......................................................................... 72

Configuring Performance Options...............................................74

Performance Options....................................................................................................... 74

Intel (R) Turbo Boost Technology.....................................................................................74

Enabling or disabling Intel Turbo Boost Technology........................................................ 74

Advanced Performance Tuning Options.......................................................................... 74

HW Prefetcher.......................................................................................................75

Enabling or disabling the Intel prefetch function....................................................75

Adjacent Sector Prefetcher................................................................................... 75

Enabling or disabling the adjacent sector prefetch function.................................. 75

DCU Stream Prefetcher.........................................................................................76

Enabling or disabling the DCU stream prefetch function.......................................76

DCU IP Prefetcher.................................................................................................76

Enabling or disabling the DCU IP stream prefetch function.................................. 76

Memory Proximity Reporting for I/O...................................................................... 77

Enabling or disabling Memory Proximity Reporting for I/O....................................77

I/O Non-posted Prefetching...................................................................................77

Enabling or disabling I/O Non-posted Prefetching................................................ 77

NUMA Group Size Optimization............................................................................77

Setting NUMA Group Size Optimization................................................................78

Enabling maximum internal graphics frequency....................................................78

Configuring Server Security.........................................................79

Server Security options.................................................................................................... 79

Set Power On Password.................................................................................................. 79

Setting the power-on password........................................................................................79

Set Admin Password........................................................................................................80

Setting an administrator password...................................................................................80

One-Time Boot Menu (F11 Prompt)................................................................................. 80

Enabling or disabling the One-Time Boot Menu F11 prompt........................................... 80

No-Execute Protection..................................................................................................... 81

Enabling or disabling no-execute virus protection............................................................81

Processor AES-NI Support...............................................................................................81

Enabling or disabling processor AES-NI support............................................................. 81

Secure Boot......................................................................................................................81

Secure Boot Settings.............................................................................................82

Secure Boot Enforcement..................................................................................... 82

Enabling or disabling Secure Boot........................................................................ 82

Advanced Secure Boot Options....................................................................................... 83

Platform Key (PK) Options.................................................................................... 83

Enroll PK................................................................................................................83

Enrolling a PK certificate....................................................................................... 83

Delete Platform Key (PK)...................................................................................... 84

Deleting a PK certificate........................................................................................ 84

Key Exchange Key (KEK) Options........................................................................ 84

Enroll KEK Entry....................................................................................................84

7

Enrolling a KEK certificate.....................................................................................85

Delete KEK Entry...................................................................................................85

Deleting a KEK entry............................................................................................. 85

Allowed Signatures Database (DB) Options......................................................... 85

Enroll Signature (Allowed DB)...............................................................................86

Enrolling a signature in the Allowed Signatures Database....................................86

Delete Signature (Allowed DB)..............................................................................86

Deleting a signature from the Allowed Signatures Database................................ 86

Forbidden Signatures Database (DBX) Options................................................... 86

Enroll Signature (Forbidden DB)........................................................................... 87

Enrolling a signature in the Forbidden Signatures Database................................ 87

Delete Signature (Forbidden DB).......................................................................... 87

Deleting a signature from the Forbidden Signatures Database............................ 87

Delete all keys (PK, KEK, DB, DBX)..................................................................... 87

Deleting all keys ................................................................................................... 88

Reset all keys to platform defaults........................................................................ 88

Resetting all Secure Boot certificate keys to platform defaults............................. 88

Trusted Platform Module options..................................................................................... 88

Enabling the Trusted Platform Module.............................................................................88

Configuring PCIe devices.............................................................90

PCI Device Enable/Disable.............................................................................................. 90

Configuring specific PCIe devices....................................................................................90

Configuring Server Availability....................................................91

Server Availability options................................................................................................ 91

ASR Status.......................................................................................................................91

Enabling or disabling ASR............................................................................................... 91

ASR Timeout....................................................................................................................91

Setting the ASR timeout...................................................................................................91

Wake-On LAN.................................................................................................................. 92

Enabling or disabling Wake-On LAN................................................................................92

POST F1 Prompt..............................................................................................................92

Setting the POST F1 prompt delay.................................................................................. 93

Power Button Mode..........................................................................................................93

Enabling or disabling momentary power button functionality........................................... 93

Automatic Power-On........................................................................................................ 94

Setting the automatic power-on state...............................................................................94

Power-On Delay...............................................................................................................94

Setting the power-on delay.............................................................................................. 95

Configuring BIOS serial console and EMS options................... 96

BIOS Serial Console and EMS options............................................................................96

BIOS Serial Console Emulation Mode............................................................................. 96

Setting the BIOS Serial Console Emulation Mode........................................................... 96

EMS Console................................................................................................................... 96

Configuring the EMS console...........................................................................................97

Configuring Server Asset Information........................................ 98

Server Asset Information options..................................................................................... 98

Server Information............................................................................................................98

Entering server information.............................................................................................. 98

8

Administrator Information................................................................................................. 98

Entering administrator information................................................................................... 98

Service Contact Information.............................................................................................99

Entering service contact information................................................................................ 99

Custom POST Message ..................................................................................................99

Entering a custom POST message .................................................................................99

Configuring advanced platform configuration options........... 101

Advanced Options..........................................................................................................101

Video Options.................................................................................................................101

Configuring the video display......................................................................................... 101

Embedded Video Connection.........................................................................................101

Configuring an embedded video connection..................................................................102

GPU Aperture size......................................................................................................... 102

Configuring the GPU aperture size................................................................................ 102

Enabling Intel Protected Audio Video Playback (PAVP) (m710x and m710x-L server

blades)............................................................................................................................102

Enabling PCI Express Native Control............................................................................ 103

Enabling Integrated Graphics Video...............................................................................103

Advanced System ROM Options................................................................................... 104

NMI Debug Button...............................................................................................104

Enabling or disabling the NMI debug button....................................................... 104

PCI Bus Padding Options....................................................................................104

Enabling or disabling PCI Bus padding .............................................................. 105

Consistent Device Naming.................................................................................. 105

Enabling or disabling Consistent Device Naming................................................105

Serial Number......................................................................................................105

Re-entering a serial number................................................................................106

Product ID............................................................................................................106

Re-entering a product ID..................................................................................... 106

Configuring the date and time and system defaults................107

Setting the Date and Time .............................................................................................107

Resetting system defaults.............................................................................................. 107

System Default Options.......................................................................................107

Restore Default System Settings ....................................................................... 107

Restoring default system settings....................................................................... 108

Restore Default Manufacturing Settings .............................................................108

Restoring default manufacturing settings............................................................ 108

Default UEFI Device Priority................................................................................109

Changing the default UEFI device priority...........................................................109

User Default Options........................................................................................... 109

Saving or erasing user default options ............................................................... 110

Scripted configuration flows.............................................................. 111

Using scripted configuration flows............................................112

Scripted configuration flow............................................................................................. 112

Configuration Replication Utility (CONREP)........................................................ 112

iLO RESTful API support for UEFI.......................................................................112

HPE Smart Storage Administrator (HPE SSA).................................................... 112

9

Troubleshooting.................................................................................. 113

Troubleshooting ..........................................................................114

Cannot boot devices.......................................................................................................114

Cannot restore system defaults .....................................................................................115

Cannot download the file in the network boot URL ....................................................... 115

Cannot network boot with the downloaded image file ................................................... 116

Cannot deploy from the UEFI Shell script ..................................................................... 117

Cannot execute Option ROM for one or more devices...................................................117

Cannot find a new network or storage device in the Boot Order list...............................118

Invalid Server Serial Number and Product ID.................................................................118

Invalid time or date......................................................................................................... 118

Support................................................................................................ 120

Websites.......................................................................................121

Additional UEFI-related websites................................................................................... 121

Related information........................................................................................................ 121

Support and other resources..................................................... 123

Accessing Hewlett Packard Enterprise Support.............................................................123

Accessing updates......................................................................................................... 123

Customer self repair.......................................................................................................124

Remote support..............................................................................................................124

Warranty information......................................................................................................124

Regulatory information................................................................................................... 125

Documentation feedback............................................................................................... 125

10

Getting started

This part introduces the UEFI System Utilities menu-driven interface and its configuration options.

Getting started 11

UEFI System Utilities

The UEFI System Utilities is embedded in the system ROM. Its features enable you to perform a wide
range of configuration activities, including:

• Configuring system devices and installed options.

• Enabling and disabling system features.

• Displaying system information.

• Selecting the primary boot controller or partition.

• Configuring memory options.

• Launching other preboot environments.

HPE servers with UEFI can provide:

• Support for boot partitions larger than 2.2 TB. Such configurations could previously only be used for
boot drives when using RAID solutions.

• Secure Boot that enables the system firmware, option card firmware, operating systems, and software
collaborate to enhance platform security.

• UEFI Graphical User Interface (GUI)

• An Embedded UEFI Shell that provides a preboot environment for running scripts and tools.

• Boot support for option cards that only support a UEFI option ROM.

What is UEFI?

Unified Extensible Firmware Interface (UEFI) defines the interface between the operating system and
platform firmware during the boot, or start-up process. Compared to BIOS, UEFI supports advanced pre­boot user interfaces. The UEFI network stack enables implementation on a richer network-based OS
deployment environment while still supporting traditional PXE deployments. UEFI supports both IPv4 and
IPv6 networks. In addition, features such as Secure Boot enable platform vendors to implement an OS­agnostic approach to securing systems in the pre-boot environment.

The ROM-Based Setup Utility (RBSU) functionality is available from the UEFI interface along with
additional configuration options.

12 UEFI System Utilities

UEFI System Utilities overview

Launching the System Utilities

Procedure

1. Optional: If you access the server remotely, start an iLO remote console session.

a. Open a browser and enter https://<iLO host name or IP address> to log on to the iLO

web interface.

b. On the login page, enter a directory or local user account name and password, and click Log In.

c. Select Remote Console & Media in the iLO navigation tree.

The Launch tab is displayed.

d. Verify that your system meets the requirements for using the remote console application you want

to use.

e. Click the launch button for your selected application.

You can also launch an iLO Remote Console session by selecting:

• The Integrated Remote Console link on the Information - iLO Overview page.

• The Console thumbnail in the low left corner of the iLO web interface, and then choosing the
application type to launch.

2. Restart or power on the server.

The server restarts and the POST screen appears.

3. Press F9.

The System Utilities screen appears.

Navigating the System Utilities

Procedure

1. Launch the System Utilities and do one of the following.

• To navigate through the screens and modify settings, use your pointing device or press any of the
navigational keys. Key functions are shown at the bottom of every System Utilities screen.

TIP: When Setup Browser Selection is set to Auto (the default setting) or GUI, you can use
your pointing device to navigate the System Utilities screens. When Setup Browser
Selection is set to Text, you must use the navigational keys.

• To access the mobile online help, scan the QR code on the bottom left of the System Utilities
screen with your mobile device.

2. To exit the System Utilities screen and reboot the server, press Esc until the main menu is displayed,

and then select one of the following options:

UEFI System Utilities overview 13

• Exit and resume boot—Exits the system and continues the normal boot process. The system
continues through the boot order list and launches the first bootable option in the system.

• Reboot the System—Exits the system and reboots the system without continuing the normal boot
process.

System Utilities key functions

• Up or down arrow—Selects a menu option. When selected, the color of a menu option changes from
white to yellow in text browser mode, or to green in GUI mode.

• Enter—Selects an entry. A selected option changes color from white to yellow in text browser mode,
or to green in GUI mode. When a submenu is available, the submenu appears.

• Esc—Returns to the previous screen.

• F1—Displays online help about a selection in text mode.

NOTE: To display online help in GUI mode, click the ? icon on the upper right corner of the System
Utilities main screen.

• F7—Loads default UEFI BIOS configuration settings.

NOTE: Pressing F7 only resets the BIOS configuration. It does not reset other entities, such as option
cards or iLO.

• F10—Prompts you to save changed settings.

• F12—Prompts you to save changed settings, and then exits the System Utilities.

• Reboot Required (radio button)—Is selected and turns red when changes require that you reboot the
server.

• Changes Pending (radio button)—Is selected and turns red when changes are pending that must be
saved to take effect.

When a reboot is required

For certain configuration changes to take effect, a reboot might be required. In such cases, one of the
following occurs depending on your Setup Browser Selection that prompts you to do so.

• In GUI mode, the Reboot Required (radio button) is selected and turns red when changes require
that you reboot the server.

• In text mode, a prompt appears on the applicable System Utilities screen.

System Utilities menu overview

NOTE: UEFI system configuration options vary by server platform. Therefore, you might not see some of

the options that are documented here.

The System Utilities screen is the main screen in the UEFI menu-driven interface. It displays menu
options for the following configuration tasks:

• System Configuration—Displays options for viewing and configuring:

14 UEFI System Utilities overview

◦ BIOS/Platform Configuration (RBSU)

◦ iLO 5 Configuration Utility

◦ Other system-specific devices, such as installed Smart Array devices, PCIe cards, and NICs. For

example, Embedded FlexibleLOM Port 1.

NOTE: Throughout the menus, the interface attempts to display the proper marketing name for
installed PCI devices. If the interface does not recognize a device, it assigns a generic label to the
device, such as a non-HPE name. This generic labeling does not affect the functionality or
operation of the device. Devices vary based on your system.

• One-Time Boot Menu—Displays options for selecting a boot override option and running a UEFI
application from a file system.

• Embedded Applications—Displays options for viewing and configuring:

◦ Embedded UEFI Shell

◦ Integrated Management Log (IML)

◦ Firmware Update

• System Information—Displays options for viewing the server name and generation, serial number,
product ID, BIOS version and date, power management controller, backup BIOS version and date,
system memory, and processors.

• System Health—Displays options for viewing the current health status of all devices in the system.

• Exit and resume system boot—Exits the system and continues the normal boot process.

• Reboot the System—Exits the system and reboots it by going through the UEFI Boot Order list and
launching the first bootable option in the system. For example, you can launch the UEFI Shell, if
enabled and listed as the first bootable option in the list.

• Select Language—Enables you to select a language to use in the user interface. English is the
default language.

Common setup and configuration FAQs

1. How do I access the UEFI System Utilities?

See Launching the System Utilities.

2. How do I transition from RBSU settings to UEFI settings?

The BIOS/Platform Configuration (RBSU) menu replaced the ROM-Based Setup Utility (RBSU). Use
this menu to access and use UEFI options. See BIOS/Platform Configuration (RBSU).

3. How do I determine if a server has UEFI boot options?

See Boot Options.

4. How do I select a boot device?

See Launching the System Utilities. To access the One-Time Boot Menu where you can select an
option for a one-time boot override, do one of following:

• Press F11 during server POST.

• On the System Utilities screen, select One-Time Boot Menu. See One-Time Boot Menu
options.

UEFI System Utilities overview 15

To modify the boot order for all boots, see Changing the UEFI boot order.

5. How do I enable or disable Intel Hyperthreading?

By default, Intel Hyperthreading is enabled. To disable or re-enable this setting, see Enabling or
disabling Intel Hyperthreading.

6. How do I configure the Minimum Processor Idle Power Package State to No Package State?

By default, this is set to Package C6 (retention) State, the lowest processor idle power state. To
change this setting, see Minimum Processor Idle Power Package C-State.

7. How do I configure the time zone?

See Setting the Date and Time.

8. How do I save my configuration changes and reboot the system?

a. When you are done making changes, if you do not see the prompt Changes are pending.

Do you want to save changes and exit?, press F10 to display it.

b. Press Y to save your changes.

A Change saved confirmation prompt appears.

c. Select a reboot option and press Enter:

• Exit and resume system boot—Exits the system and continues the normal boot process.

The system continues through the boot order list and launches the first bootable option in the
system.

• Reboot the System—Exits the system and reboots the system without continuing

the normal boot process.

9. How do I enter the Embedded UEFI Shell?

Launching the Embedded UEFI Shell.

See

10. How do I view the health status of all installed options and devices?

See Viewing System Health.

11. How do I use CONREP to replicate UEFI settings?

See Configuration Replication Utility (CONREP) .

16 UEFI System Utilities overview

System Utilities main menu options

The System Utilities main menu is your starting point for:

• System Configuration

• One-Time Boot Menu

• Embedded Applications

• System Information

• System Health

• Exit and resume system boot

• Reboot the System

• Select Language

• Setup Browser Selection

System Utilities main menu options 17

System Configuration

System Configuration menu options

• BIOS/Platform Configuration (RBSU)

• iLO 5 Configuration Utility

• Other system-specific devices, such as installed PCIe cards, NICs, and Smart Arrays. For example,
Embedded FlexibleLOM Port 1.

BIOS/Platform Configuration (RBSU)

The BIOS/Platform Configuration (RBSU) menu contains many of the nested options for accessing
UEFI options, including:

Using the iLO 5 Configuration Utility

iLO 5 Configuration Utility options

You can access the iLO 5 Configuration Utility from the physical system console, or by using an iLO 5
remote console session. The utility has the following options:

• Network Options

• Advanced Network Options

• User Management

• Setting Options

• Set to factory defaults

• Reset iLO

• About

Network Options

• MAC Address (read-only)—Specifies the MAC address of the selected iLO network interface.

• Network Interface Adapter—Specifies the iLO network interface adapter to use.

◦ ON—Uses the iLO Dedicated Network Port.

◦ Shared Network Port—Uses the Shared Network Port. This option is only available on supported

servers.

◦ OFF—Disables all network interfaces to iLO.

• Transceiver Speed Autoselect (iLO Dedicated Network Port only)—Enables iLO to negotiate the
highest supported link speed and duplex settings when connected to the network.

This option is only available when Network Interface Adapter is set to ON.

• Transceiver Speed Manual Setting (iLO Dedicated Network Port only)—Sets the link speed for the
iLO network interface.

18 System Configuration

This option is only available when Network Interface Adapter is set to ON and Transceiver Speed
Autoselect is set to OFF.

• Transceiver Duplex Setting (iLO Dedicated Network Port only)—Sets the link duplex setting for the
iLO network interface.

This option is only available when Network Interface Adapter is set to ON and Transceiver Speed
Autoselect is set to OFF.

• VLAN Enable (Shared Network Port only)—Enables the VLAN feature.

When the Shared Network Port is active and VLAN is enabled, the iLO Shared Network Port becomes
part of a VLAN. All network devices with different VLAN tags will appear to be on separate LANs, even
if they are physically connected to the same LAN. This option is only available when Network
Interface Adapter is set to Shared Network Port.

• VLAN ID (Shared Network Port only)—When a VLAN is enabled, specifies a VLAN tag.

All network devices that you want to communicate with each other must have the same VLAN tag. The
VLAN tag can be any number between 1 and 4094. This option is only available when Network
Interface Adapter is set to Shared Network Port.

• DHCP Enable—Configures iLO to obtain its IP address (and many other settings) from a DHCP
server.

• DNS Name—Sets the DNS name of the iLO subsystem.

This name can only be used if DHCP and DNS are configured to connect to the iLO subsystem name
instead of the IP address.

• IP Address—Specifies the iLO IP address.

If DHCP is used, the iLO IP address is supplied automatically. If DHCP is not used, enter a static IP
address.

• Subnet Mask—Specifies the subnet mask of the iLO IP network.

If DHCP is used, the subnet mask is supplied automatically. If DHCP is not used, enter a subnet mask
for the network.

• Gateway IP Address—Specifies the iLO gateway IP address.

If DHCP is used, the iLO gateway IP address is supplied automatically. If DHCP is not used, enter the
iLO gateway IP address.

Configuring Network Options

Procedure

1. From the System Utilities screen, select System Configuration > iLO 5 Configuration Utility >
Network Options.

2. Select any of the Network Options, and then select a setting or enter a value for that option.

3. Save your settings.

Advanced Network Options

• Gateway from DHCP—Specifies whether iLO uses a DHCP server-supplied gateway.

• Gateway #1, Gateway #2, and Gateway #3—If Gateway from DHCP is disabled, specifies up to
three iLO gateway IP addresses.

System Configuration 19

• DHCP Routes—Specifies whether iLO uses the DHCP server-supplied static routes.

• Route 1, Route 2, and Route 3—If DHCP Routes is disabled, specifies the iLO static route
destination, mask, and gateway addresses.

• DNS from DHCP—Specifies whether iLO uses the DHCP server-supplied DNS server list.

• DNS Server 1, DNS Server 2, DNS Server 3—If DNS from DHCP is disabled, specifies the primary,
secondary, and tertiary DNS servers.

• WINS from DHCP—Specifies whether iLO uses the DHCP server-supplied WINS server list.

• Register with WINS Server—Specifies whether iLO registers its name with a WINS server.

• WINS Server #1 and WINS Server #2—If WINS from DHCP is disabled, specifies the primary and
secondary WINS servers.

• Domain Name—The iLO domain name. If DHCP is not used, specifies a domain name.

Configuring Advanced Network Options

Procedure

1. From the System Utilities screen, select System Configuration > iLO 5 Configuration Utility >
Advanced Network Options.

2. Select any of the Advanced Network Options, and then select a setting or enter a value for that

option.

3. Save your settings.

User Management

• Add User

• Edit/Remove User

Add User

Use this option to add new local iLO user accounts, with the following privileges and information.

iLO 5 user privileges

• Administer User Accounts—Enables a user to add, edit, and delete local iLO user accounts. A user
with this privilege can change privileges for all users.

If you do not have this privilege, you can view your own settings and change your own password.

• Remote Console Access—Enables a user to remotely access the host system Remote Console,
including video, keyboard, and mouse control.

• Virtual Power and Reset—Enables a user to power-cycle or reset the host system.

These activities interrupt the system availability. A user with this privilege can diagnose the system by
using the Generate NMI to System button.

• Virtual Media—Enables a user to use the Virtual Media feature on the host system.

• Configure Settings—Enables a user to configure most iLO settings, including security settings, and
to remotely update the iLO firmware.

20 System Configuration

This privilege does not enable local user account administration. After iLO is configured, revoking this
privilege from all users prevents reconfiguration using the web interface, HPQLOCFG, or the CLI.
Users who have access to iLO RBSU, the iLO 5 Configuration Utility, or HPONCFG can still
reconfigure iLO. Only a user who has the Administer User Accounts privilege can enable or disable
this privilege.

• Host BIOS—Enables a user to configure the host BIOS settings by using the UEFI System Utilities.

• Host NIC—Enables a user to configure the host NIC settings.

• Host Storage—Enables a user to configure the host storage settings.

• Recovery Set—Enables a user to manage the recovery install set.

NOTE: By default, the Recovery Set privilege is assigned to the default Administrator account. To
assign this privilege to another account, log into the iLO web interface with an account that already
has this privilege. This privilege is not available if you start a session when the system maintenance
switch is set to disable iLO security.

New User Information

• New User Name—Specifies the name that appears in the user list on the User Administration page.
It does not have to be the same as the Login Name. The maximum length for a user name is 39
characters. The user name must use printable characters. Assigning descriptive user names can help
you to easily identify the owner of each login name.

• Login Name—Specifies the name that must be used when logging in to iLO. It appears in the user list
on the User Administration page, on the iLO Overview page, and in iLO logs. The Login Name
does not have to be the same as the User Name. The maximum length for a login name is 39
characters. The login name must use printable characters.

• Password and Password Confirm—Sets and confirms the password that is used for logging in to
iLO. The maximum length for a password is 39 characters. Enter the password twice for verification.

Adding new user accounts

Procedure

1. From the System Utilities screen, select System Configuration > iLO 5 Configuration Utility >
User Management > Add User.

2. Select any of the iLO 5 user privileges.

3. For each option, select one of the following settings.

• YES —Enables the privilege for this user.

• NO—Disables the privilege for this user.

4. Select a New User Information entry.

5. Complete each entry for the new user.

6. Create as many user accounts as needed, and then save your settings.

Edit/Remove User

Use this option to edit iLO user account settings, or to delete user accounts.

System Configuration 21

Editing or removing user accounts

Procedure

1. From the System Utilities screen, select System Configuration > iLO 5 Configuration Utility >
User Management > Edit/Remove User.

2. Select the Action menu for the user account you want to edit or delete.

3. Select one of the following.

• Delete—Deletes the user account.

• Edit—Enables you to edit the user login name, password or user permissions.

4. Update as many user accounts as needed, and then save your settings.

Setting Options

Use this menu to view and configure iLO access settings.

• iLO 5 Functionality—Specifies whether iLO functionality is available. When this setting is enabled
(default), the iLO network is available and communications with operating system drivers are active.
When this setting is disabled, the iLO network and communications with operating system drivers are
terminated.

The iLO network and communications with operating system drivers are terminated when iLO
functionality is disabled.

NOTE: For ProLiant blade servers, the iLO functionality cannot be disabled on blade servers.

• iLO 5 Configuration Utility—Enables or disables the iLO 5 Configuration Utility.

If this option is set to Disabled, the iLO 5 Configuration Utility menu item is not available when you
access the UEFI System Utilities.

• Require Login for iLO 5 Configuration—Determines whether a user-credential prompt is displayed
when a user accesses the iLO 5 functionality.

If this setting is Enabled, provide user credentials for functions, including updating with SUM and
RESTful Interface Tool.

• Show iLO 5 IP Address during POST—Enables the display of the iLO network IP address during
host server POST.

• Local Users—Enables or disables local user account access.

• Serial CLI Status—Specifies the login model of the CLI feature through the serial port. Settings are:

◦ Enabled-Authentication Required—Enables access to the iLO CLP from a terminal connected to

the host serial port. Valid iLO user credentials are required.

◦ Enabled-No Authentication Required—Enables access to the iLO CLP from a terminal

connected to the host serial port. iLO user credentials are not required.

◦ Disabled—Disables access to the iLO CLP from the host serial port.

Use this option if you are planning to use physical serial devices.

• Serial CLI Speed (bits/second)—Specifies the speed of the serial port for the CLI feature. Settings
(in bits per second) are:

22 System Configuration

◦ 9600

◦ 19200

◦ 57600

◦ 115200

For correct operation, set the serial port configuration to no parity, 8 data bits, and 1 stop bit (N/8/1).

NOTE: The 38400 speed is supported in the iLO web interface, but is not currently supported by the
iLO 5 Configuration Utility.

• iLO Web Interface—Specifies whether the iLO web interface can be used to communicate with iLO.
This setting is enabled by default.

Configuring access settings

Procedure

1. From the System Utilities screen, select System Configuration > iLO 5 Configuration Utility >
Setting Options.

2. Update user access Setting Options.

3. Save your settings.

Set to factory defaults

CAUTION: This operation clears all user and license data.

Use this option to reset iLO to the factory default settings. When you do so, you cannot access the iLO 5
Configuration Utility until after the next system reboot. If you are managing iLO remotely, the remote
console session is automatically ended.

If the server has a factory installed license key, the license key is retained.

Resetting iLO to the factory default settings

Procedure

1. From the System Utilities screen, select System Configuration > iLO 5 Configuration Utility > Set
to factory defaults.

The iLO 5 Configuration Utility prompts you to select YES or NO.

2. Select YES.

3. When prompted to confirm the reset, press Enter.

iLO resets to the factory default settings. If you are managing iLO remotely, the remote console
session is automatically ended.

4. Resume the boot process:

a. Optional: If you are managing iLO remotely, wait for the iLO reset to finish, and then start the iLO

remote console.

System Configuration 23

The iLO 5 Configuration Utility screen is still open from the previous session.

b. Press Esc until the main menu is displayed.

c. Select Exit and Resume Boot in the main menu, and then press Enter.

d. When prompted to confirm the request, press Enter to exit the screen and resume the boot

process.

Reset iLO

If iLO is slow to respond, you can use this option to perform a reset.

Resetting iLO with this method does not make any configuration changes, but it ends all active
connections to iLO. When you reset iLO, the iLO 5 Configuration Utility is not available again until the
next reboot.

Resetting iLO active connections

Prerequisites

Configure iLO Settings privilege

Procedure

About

1. From the System Utilities screen, select System Configuration > iLO 5 Configuration Utility >
Reset iLO.

The iLO 5 Configuration Utility prompts you to select YES or NO.

2. Select YES.

3. When prompted to confirm the reset, press Enter.

Active iLO connections are reset. If you are managing iLO remotely, the remote console session is
automatically ended.

4. Resume the boot process:

a. Optional: If you are managing iLO remotely, wait for the iLO reset to finish, and then start the iLO

remote console.

The UEFI System Utilities are still open from the previous session.

b. Press Esc until the main menu is displayed.

c. Select Exit and Resume Boot in the main menu, and press Enter.

d. When prompted to confirm the request, press Enter to exit the utility and resume the normal boot

process.

Use this menu to view information about the following iLO components.

• Firmware Date—The iLO firmware revision date.

• Firmware Version—The iLO firmware version.

• iLO CPLD Version—The iLO complex programmable logic device version.

24 System Configuration

• Host CPLD Version—The server complex programmable logic device version.

• Serial Number—The iLO serial number.

• PCI BUS—The PCI bus to which the iLO processer is attached.

• Device—The device number assigned to iLO in the PCI bus.

Viewing information about iLO

Procedure

1. From the System Utilities screen, select System Configuration > iLO 5 Configuration Utility >
About.

2. View information about iLO components.

Viewing and configuring embedded device information

NIC and FCoE information

The System Configuration screens show information about and configure installed system devices,
such as embedded NICs and FCoEs. Devices listed and configuration options available vary by system.

Viewing and configuring NIC and FCoE settings

Use the System Configuration screens to view information about and configure installed system
devices, such as embedded NICs and FCoEs. Devices listed and configuration options available vary by
system.

Procedure

1. From the System Utilities screen, select System Configuration.

2. Select a device.

A System Configuration screen displays information about the embedded device.

3. View, select, or enter settings.

4. Save your settings.

NPAR configuration

NPAR (NIC Partitioning multi-function mode) enables you to partition a NIC into multiple virtual NICs with
multiple PCI physical functions per port. Each PCI function is associated with a different virtual NIC. To
the OS and the network, each physical function appears as a separate NIC port.

Enabling NPAR on a NIC

NOTE: The following procedure shows how to enable NPAR on an Embedded FlexibleLOM card. NIC

options vary by system.

Procedure

1. From the System Configuration screen, select an Embedded FlexibleLOM and press Enter.

System Configuration 25

Information and configuration options related to the embedded device appear.

2. Select Multi-Function Mode and press Enter.

3. Select NPAR1.5 and press Enter.

4. Press F10.

Up to eight virtual NICs for this device are now available.

26 System Configuration

One-Time Boot Menu

One-Time Boot Menu options

Use the One-Time Boot Menu to select a UEFI boot option for a one-time boot override. The option you
select does not modify your predefined boot order settings. If you use a USB key or virtual media through
the iLO Remote Console, exit and re-enter the System Utilities to refresh this menu so that the devices
appear.

Boot options include:

• OS boot manager, such as Windows Boot Manager—Lists the boot manager for your installed OS.

• Generic USB Boot—Provides a place holder for any USB device that is bootable in UEFI. You can set
the boot priority of this option, and retain this priority for use with USB devices you might install in the
future. Setting this priority does not affect priorities set for individual USB devices in the UEFI Boot
Order list.

• Embedded Flexible LOMs

• Embedded UEFI Shell

• Embedded SATA Port

• Run a UEFI Application from a file system—Enables you to select a UEFI application to run from a
file system. You can browse all FAT file systems that are available in the system. You can also select
an x64 UEFI application (with a .EFI extension) to execute (can be an OS boot loader or any other
UEFI application).

Selecting an option for a one-time boot

Procedure

1. From the System Utilities screen, select One-Time Boot Menu and press Enter.

2. Select an option and press Enter.

3. Reboot the server.

One-Time Boot Menu 27

Embedded Applications

Embedded Applications options

• Embedded UEFI Shell

• Integrated Management Log (IML)

• Active Health System Log

• Embedded Diagnostics

Embedded UEFI Shell

Use this option to launch the Embedded UEFI Shell. The Embedded UEFI Shell is a pre-boot command­line environment for scripting and running UEFI applications, including UEFI boot loaders. The Shell also
provides CLI-based commands you can use to obtain system information, and to configure and update
the system BIOS.

Launching the Embedded UEFI Shell

Use the Embedded UEFI Shell option to launch the Embedded UEFI Shell. The Embedded UEFI Shell is
a pre-boot command-line environment for scripting and running UEFI applications, including UEFI boot
loaders. The Shell also provides CLI-based commands you can use to obtain system information, and to
configure and update the system BIOS.

Prerequisites

Embedded UEFI Shell is set to enabled.

Procedure

1. From the System Utilities screen, select Embedded Applications > Embedded UEFI Shell.

The Embedded UEFI Shell screen appears.

2. Press any key to acknowledge that you are physically present.

This step ensures that certain features, such as disabling Secure Boot or managing the Secure Boot
certificates using third-party UEFI tools, are not restricted.

3. If an administrator password is set, enter it at the prompt and press Enter.

The Shell> prompt appears.

4. Enter the commands required to complete your task.

5. Enter the exit command to exit the Shell.

Integrated Management Log (IML)

Use this option to view or clear the IML. The IML provides a record of historical events that have occurred
on the server. Entries in the IML can help you diagnose issues or identify potential issues. The IML
timestamps each event with one-minute granularity.

28 Embedded Applications

Viewing or clearing the Integrated Management Log

Use the Integrated Management Log (IML) option to view or clear the record of historical events that
have occurred on the server. Entries in the IML can help you diagnose issues or identify potential issues.
The IML time stamps each event with one-minute granularity.

Procedure

1. From the System Utilities screen, select Embedded Applications > Integrated Management Log.

2. Select an option.

• View IML—Displays the Integrated Management Log records.

• Clear IML—Clears all entries in the Integrated Management Log.

Active Health System Log

Use this option to download an AHS log. By default, the system downloads logs from the previous seven
days if you do not use the Range Start Date and Range End Date fields to specify a different time
period. When requested by Hewlett Packard Enterprise Support, you can copy your stored .ahs file, and
email it to your customer support representative.

Downloading an AHS Log

Procedure

1. From the System Utilities screen, select Embedded Applications > Active Health System Log and
press Enter.

2. Select Download Active Health System Log and press Enter.

3. Complete the following and press Enter after each selection or data entry.

a. Download Entire Log — Unless you are advised by support personnel to download AHS records

for the life of the server, leave this disabled (not selected). The default setting is disabled.

b. Range Start Date — Enter a starting date for log collection.

c. Range End Date — Enter an ending date for log collection.

d. Select File Location — Select this option to open a File Explorer screen and select the FAT16

FAT32 partition on local or virtual writable media on which to download the AHS log.

NOTE: Hewlett Packard Enterprise recommends storing AHS logs on USB or HDD media. Storing
logs on SD cards is not supported.

e. Optional: Add your customer information, including support case number, and contact information.

4. Select Start Download and press Enter.

5. The UEFI firmware communicates with iLO to download the requested AHS log files and package

them into one .ahs file.

6. When requested by Hewlett Packard Enterprise Support, copy your stored .ahs file, and email it to
your customer support representative.

Embedded Applications 29

NOTE: You can also download AHS log files by selecting System Utilities > System Health >
Download Active Health System Log

.

Embedded Diagnostics

Use this option to launch the Hardware Diagnostics menu. From there, you can view health summary
status, run system tests and component tests, and view test logs.

Launching Embedded Diagnostics

Use the Embedded Diagnostics option to launch the Hardware Diagnostics menu. From there, you can
view health summary status, run system tests and component tests, and view test logs.

Procedure

1. From the System Utilities screen, select Embedded Applications > Embedded Diagnostics.

The Hardware Diagnostics screen appears.

2. Select an option.

• System Health—Lists a Health Summary (status for BIOS hardware, fans, temperature, battery,

memory, network, and storage), Fans (zone, label, status, and speed), Temperature (label, location,
status, current reading, and cautions), Power Supplies (power supply summary and smart storage
battery), Processors, Memory, NIC Information, Storage, and Firmware Information.

• System Tests—Lists information and gives you options for checking hardware subsystems to

ensure that they are working properly. The Quick Test option performs a 10-minute check of the
hardware. The Extensive Test option performs a full check of the hardware and can take two or
more hours to complete.

• Component Tests—Lists information and gives you options for checking Processor, Memory, Hard

Drive, Keyboard, Mouse, Network, Optical Drive, System Board, USB Port, and Video tests.

• Test Logs—Displays test logs, which contain information about test type and results, including

failures.

• IML Log—Displays all IML log files, which include information about the severity, class, initial time,

and update time.

• Language—Selects your language for the Embedded Diagnostics.

• Exit—Exits the Embedded Diagnostics menu and returns you to the System Utilities screen.

30 Embedded Applications

System Information and System Health

System Information

Use this option to view:

• Summary—Shows a summary of system settings, including:

◦ System Name

◦ Serial Number

◦ Product ID

◦ BIOS Version Power Management Controller FW Version User Defaults

◦ Boot Mode

◦ System Memory

◦ Processor types

◦ iLO Firmware Version

◦ Embedded Network Devices

• Processor Information—Shows detailed processor information, including:

◦ CPU number, Socket number, and Socket Locator label

◦ Whether the CPU socket is Populated with a CPU package

◦ A brief CPU Manufacturer Description and a list of Characteristics that the CPU supports

◦ The Core Count, the number of enabled cores, and Thread Count (number of logical cores) in the

CPU package

◦ The Rated Speed and External Clock Speed of the CPU

◦ The Voltage of the CPU package

◦ A list of Microcode Patches installed by the BIOS

◦ L1, L2, and L2 cache size and speed

• Memory Information—Shows detailed memory information, including

◦ Total System Memory

◦ Total Memory Slots

◦ Operating frequency and voltage

◦ The Number of Slots connected to the CPU

◦ The number of Installed Modules that are directly connected to the CPU

• PCI Device Information—Shows detailed information about each PCI device.

• Firmware Information—Shows detailed firmware information.

Export System Information to file—Opens a screen where you can:

System Information and System Health 31

1. Select file location—Select or specify a new file for the exported information.

2. Select which type of system information to export.

◦ Summary

◦ Processor

◦ Memory

◦ PCI device

◦ Firmware

3. To export the information, save your selections and exit the System Utilities.

Viewing System Information

Procedure

1. From the System Utilities screen, select System Information.

2. Select an option to display related information.

NOTE: You can also view firmware information using the RESTful Interface Tool. See the RESTful
Interface Tool documentation at: http://www.hpe.com/info/restfulinterface/docs.

System Health

Use this screen to check the health status of all devices in the system. This screen shows, for example,
the presence of any unsupported devices found during the boot process.

Viewing System Information

Procedure

1. From the System Utilities screen, select System Health and press Enter.

2. Select View System Health and press Enter.

3. (Optional) To download an AHS log from this screen:

a. Select Download Active Health System Log and press Enter.

The Active Health System Log screen appears. This screen is the same screen that appears when
you select System Utilities > Embedded Applications > Active Health System Log.

b. Follow steps 3 through 5 in Downloading an AHS log.

32 System Information and System Health

Rebooting the system, selecting a language, and setting the browser mode

Rebooting the system

Exit and resume system boot

Use this option to exit the system and continue the normal boot process. The system continues through
the boot order list and launches the first bootable option in the system. For example, you can launch the
UEFI Embedded Shell, if it is enabled and selected as first bootable option in the UEFI Boot Order list.

Exiting and resuming system boot

Use the Exit and resume system boot option to exit the system and continue the normal boot process.
The system continues through the boot order list and launches the first bootable option in the system. For
example, you can launch the UEFI Embedded Shell, if it is enabled and selected as first bootable option
in the UEFI Boot Order list.

Procedure

1. From the System Utilities screen, select Exit and resume system boot.

A confirmation message appears.

2. Click OK or press Enter.

Reboot the System

Use this option to exit the system and reboot the system without continuing with the normal boot process.

Rebooting the system

Use the Reboot the System option to exit the system and reboot without continuing with the normal boot
process.

Procedure

1. From the System Utilities screen, select Reboot the System.

A confirmation message appears.

2. Click Yes, Reboot, or press Enter.

Selecting a language and browser mode

Select Language

Use this option to select a one of the following languages for the system.

Rebooting the system, selecting a language, and setting the browser mode 33

• English

• Japanese

• Simplified Chinese

Selecting a system language

Procedure

1. From the System Utilities screen, select Select Language.

2. Select a language.

• English

• Japanese

• Simplified Chinese

3. Save your setting.

34 Rebooting the system, selecting a language, and setting the browser mode

BIOS/Platform Configuration options

The System Configuration > BIOS/Platform Configuration (RBSU) menu is your starting point for:

• System Options

• Boot Options

• Network Options

• Storage Options

• Embedded UEFI Shell

• Power Management

• Performance Options

• Server Security

• PCI Device Enable/Disable

• Server Availability

• BIOS Serial Console and EMS

• Server Asset Information

• Advanced Options

• Date and Time

• System Default Options

BIOS/Platform Configuration options 35

Configuring System Options

System Options

• Serial Port Options

• USB Options

• Processor Options

• SATA Controller Options

• Virtualization Options

• Boot Time Optimization

• Memory Operations

Serial Port Options

• Virtual Serial Port

• USB Console Redirection

Virtual Serial Port

Use this option to assign a logical COM port address and the associated default resources used by the
Virtual Serial Port (VSP). VSP enables the iLO Management Controller to appear as a physical serial port
to support the BIOS Serial Console and the operating system serial console.

Assigning a Virtual Serial Port

Prerequisites

For proper screen resolution, set the console resolution in the terminal software to 100x31.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > System Options > Serial Port Options > Virtual Serial Port and press Enter.

2. Select a setting and press Enter.

a. COM 1

b. COM 2

c. Disabled

3. Press F10.

USB Console Redirection

Enable this option to mirror the serial console to a USB port that is connected with an HPE console cable
kit.

36 Configuring System Options

Enabling or disabling USB console redirection

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > System Options > Serial Port Options > USB Console Redirection and press Enter.

2. Select a setting and press Enter.

a. Enable

b. Disable

3. Press F10.

USB Options

• USB Control

• USB Boot Support

USB Control

Use this option to configure how USB ports and embedded devices operate at startup.

Setting USB Control

Use the USB Options option to configure how USB ports and embedded devices operate at startup.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > System Options > USB Options > USB Control.

2. Select a setting.

• All USB Ports Enabled—Enables all USB ports and embedded devices.

• All USB Ports Disabled—Disables all USB ports and embedded devices.

• External USB Ports Disabled—Disables external USB ports.

• Internal USB Ports Disabled—Disables internal USB ports.

3. Save your setting.

USB Boot Support

Set this option to disabled to prevent the system from booting any USB devices connected to the server,
such as preventing boot to virtual media devices and the embedded SD or SD card slot, if supported.

Enabling or disabling USB Boot Support

Use the USB Boot Support option to control whether the system can boot from connected USB devices,
such as virtual media devices, and the embedded SD card slot, if supported.

Configuring System Options 37

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > System Options > USB Options > USB Boot Support.

2. Select a setting.

• Enabled—The system can boot from USB devices connected to the server.

• Disabled—The system cannot boot from USB devices connected to the server.

3. Save your setting.

Processor Options

• Intel (R) Hyperthreading Options

• Processor Core Disable

• Processor x2APIC Support

NOTE: Options that appear on this menu vary by server model.

Intel (R) Hyperthreading Options

Use this option to disable or enable the logical processor cores on processors supporting Intel
Hyperthreading technology. Intel Hyperthreading improves overall performance for applications that
benefit from a higher processor core count.

NOTE:

Hyperthreading is not supported on all processors. For more information, see the documentation for your
processor model.

Enabling or disabling Intel Hyperthreading

Use the Intel (R) Hyperthreading Options option to disable or enable the logical processor cores on
processors supporting Intel Hyperthreading technology. Intel Hyperthreading improves overall
performance for applications that benefit from a higher processor core count.

NOTE: Hyperthreading is not supported on all processors. For more information, see the documentation
for your processor model.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Processor Options > Intel (R) Hyperthreading Options.

2. Select a setting.

• Enabled

• Disabled

3. Save your setting.

38 Configuring System Options

Processor Core Disable

Use this option to specify the number of cores to enable per processor socket using Intel's Core Multi­Processing (CMP) Technology. Unused cores are disabled. Setting this option can:

• Reduce processor power usage

• Improve overall performance for applications that benefit from higher performance cores rather than
more processing cores

• Solve issues with software that is licensed on a per-core basis

Setting the number of enabled processor cores

Use the Enabled Cores per Processor option to specify the number of cores to enable per processor
socket using Intel's Core Multi-Processing (CMP) Technology. Unused cores are disabled. Setting this
option can:

• Reduce processor power usage.

• Improve overall performance for applications that benefit from higher performance cores rather than
more processing cores.

• Solve issues with software that is licensed on a per-core basis.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Processor Options > Enabled Cores per Processor.

2. Enter the number of cores to enable.

If you enter 0, or a value that is not supported by the processor, all cores are enabled.

3. Save your setting.

Processor x2APIC Support

Use this option to enable or disable x2APIC support. When enabled, processor x2APIC support helps
operating systems run more efficiently on high core count configurations and optimizes interrupt
distribution in virtualized environments. Enabled mode does not enable x2APIC hardware, but provides
the support necessary to the operating system. Unless you are using an older hypervisor or operating
system that is not compatible with x2APIC support, leave this option enabled.

Enabling or disabling Processor x2APIC Support

When enabled, Processor x2APIC Support helps operating systems run more efficiently on high core
count configurations and optimizes interrupt distribution in virtualized environments. Enabled mode does
not enable x2APIC hardware, but provides the support necessary to the operating system. Unless you
are using an older hypervisor or operating system that is not compatible with x2APIC support, leave this
option enabled. Some hypervisors and operating systems cannot use X2APIC unless Processor x2APIC

Support is set to Force Enabled prior to booting.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Processor Options > Processor x2APIC Support.

2. Select a setting.

Configuring System Options 39

• Enabled—Generates the ACPI x2APIC control structures, and adds the option of enabling x2APIC

support to the operating system when it loads.

• Force Enabled—For certain processors, enables x2APIC support to the operating system when it

loads.

• Disabled—Disables x2APIC support.

3. Save your setting.

Intel Software Guard Extensions (SGX)

The SGX feature provides a secured memory enclave accessible only to certain authorized functions.
SGX is used with Intel SGX drivers on the OS.

The locked memory uses a security key. A default is set at the factory. Hewlett Packard Enterprise
recommends that, at start-up, you change the seed that the Intel drivers use to generate the key. You can
have the system generate a seed or you can manually enter a new seed.

The default size for the locked memory region is 128 MB. You can change the size to 32 MB or 64 MB.

Enabling the Intel Software Guard Extensions (SGX)

Use this task to create a protected region of memory that is accessible only by certain authorized
functions. Enable this feature only if you have the appropriate Intel driver on your OS. This feature is
disabled by default.

The first time you use this feature, set SGX to Enabled. Even if you plan to use Software Controlled, set
SGX to Enabled until you complete the necessary steps in the OS for the Intel drivers. Set SGX to

Software Controlled after you have configured your Intel drivers in the OS.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > System Options > Processor Options > Intel Software Guard Extensions (SGX) and
press Enter.

2. Select a setting and press Enter.

a. Enabled

b. Disabled

c. Software Controlled - Enabling or disabling of SGX is determined by the Intel drivers, which can

be configured in the OS.

If you select Enabled or Software Controlled, more configuration options are displayed:

• Select Owner EPOCH input type

• PRMRR Size

3. Press F10.

Selecting the Owner EPOCH input type

Use this task to change the seed for the security key used for the locked memory region that is created.
The Intel drivers use the seed to create a key to lock the secure memory enclave. The system ships with
a default seed. Change this number at startup to secure your memory.

40 Configuring System Options

There are two input type options:

• Generate random values through the BIOS - the BIOS generates a value. You cannot change a
system generated value.

• Manually enter values - you enter a value that you can change.

NOTE: Changing the Owner EPOCHs destroys the data in any existing enclaves.

Prerequisites

Intel Software Guard Extensions (SGX) is enabled.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > System Options > Processor Options > Select Owner EPOCH input type and press
Enter.

2. Select a setting and press Enter.

a. No Change in Owner EPOCHs - Do not change the current input type.

b. Change to New Random Owner EPOCHs - Change EPOCH to a system generated random

number.

c. Manual User Defined Owner EPOCHs - Change the EPOCH seed to a hexadecimal value that

you enter.

3. Press Enter. The system advises you to write down the EPOCH values that the system will generate
or that you will enter.

4. Optional: To not change the current EPOCH value, select No Change in Owner EPOCHs and press
Enter. Continue with Step 7.

5. Optional: To have the system generate a random EPOCH value:

a. Select Change to New Random Owner EPOCHs and press Enter.

The system generates and displays the EPOCH values:

• Software Guard Extensions Epoch 0 [<hexadecimal value>]

• Software Guard Extensions Epoch 1 [<hexadecimal value>]

You cannot edit these values.

b. Write down the values. They are not shown again after you leave this screen.

c. Continue with Step 7.

6. Optional: To manually enter an EPOCH value:

a. Select Manual User Defined Owner EPOCHs and press Enter.

The system prompts you to enter the EPOCH values:

Configuring System Options 41

• Software Guard Extensions Epoch 0 [ ]

• Software Guard Extensions Epoch 1 [ ]

b. Enter a 1-16 digit hexadecimal value for each EPOCH value.

c. Write down the values. They are not shown again after you leave this screen.

d. Continue with Step 7.

7. Press F10.

After you exit, the option is automatically set to No Change in Owner EPOCHs.

Setting the PRMRR size

Use this task to set the size of the protected region in the system. If you enabled SGX in Software
Controlled mode, the PRMRR size is automatically set to Software Controlled. When Software Controlled
is enabled, you can change the region size here or with the driver software.

Prerequisites

Intel Software Guard Extensions (SGX) is enabled.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > System Options > Processor Options > PRMRR Size and press Enter.

2. Select a setting and press Enter.

a. 32 MB

b. 64 MB

c. 128 MB

d. Software Controlled - The size of the PRMRR region is determined by the Intel drivers, which can

be configured in the OS.

3. Press F10.

SATA Controller Options

• Embedded SATA Configuration

• SATA Secure Erase

Embedded SATA Configuration

Use this option to enable embedded chipset SATA (Serial Advanced Technology Attachment) controller
support.

42 Configuring System Options

Enabling embedded chipset SATA controller support

Prerequisites

• The correct operating system drivers for your selected option.

• Boot Mode is set to UEFI Mode.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > System Options > SATA Controller Options > Embedded SATA Configuration.

2. Ensure that you are using the correct AHCI or RAID system drivers for your SATA option.

3. Select a setting and press Enter.

• Enable SATA AHCI Support—Enables the embedded chipset SATA controller for AHCI.

• Enable Dynamic Smart Array RAID Support—Enables the embedded chipset SATA controller for

Dynamic Smart Array RAID.

4. Select Enable SATA AHCI Support and press Enter.

5. Press F10.

SATA Secure Erase

Use this option to control whether SATA Secure Erase functionality is supported. This function prevents
the Secure Freeze Lock command from being sent to SATA hard drives.

Enabling SATA Secure Erase

To enable SATA Secure Erase:

Prerequisites

• The SATA controller on the hard drive is in AHCI mode.

• The hard drive supports the Secure Erase command.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > System Options > SATA Controller Options > SATA Secure Erase and press Enter.

2. Select a setting and press Enter.

a. Enabled — The Security Freeze Lock command is not sent to supported SATA hard drives,

enabling Secure Erase to function.

b. Disabled — Disables Secure Erase.

3. Press F10.

Configuring System Options 43

Virtualization Options

• Virtualization Technology

• Intel (R) VT-d

Virtualization Technology

Use this option to enable or disable Intel Virtualization Technology on a Virtual Machine Manager (VMM).
When enabled, a VMM supporting Virtualization Technology can use hardware capabilities provided by
UEFI Intel processors.

NOTE:

You do not need to disable Virtualization Technology if you are using a VMM or an operating system
that does not support AMD-V virtualization.

Enabling or disabling Virtualization Technology

Use the Intel(R) Virtualization Technology (Intel VT) to control whether a Virtual Machine Manager
(VMM) supporting Virtualization Technology can use hardware capabilities provided by UEFI Intel
processors.

NOTE: You do not need to disable Virtualization Technology if you are using a VMM or an operating
system that does not support AMD-V virtualization.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Virtualization Options > Intel(R) Virtualization Technology (Intel VT).

2. Select a setting.

• Enabled

• Disabled

3. Save your setting.

Intel (R) VT-d

Use this option to enable or disable Intel Virtualization Technology for Directed I/O (VT-d) on a Virtual
Machine Manager (VMM).

NOTE:

If you are not using a hypervisor or an operating system that supports this feature, it is not necessary to
set the Intel (R) VT-d option to disabled. You can leave it enabled.

Enabling or disabling Intel VT-d

Use the Intel (R) VT-d option to enable or disable Intel Virtualization Technology for Directed I/O (VT-d)
on a Virtual Machine Manager (VMM).

44 Configuring System Options

NOTE: If you are not using a hypervisor or an operating system that supports this feature, it is not

necessary to set the Intel (R) VT-d option to disabled. You can leave it enabled.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Virtualization Options > Intel (R) VT-d.

2. Select a setting.

• Enabled—Enables a hypervisor or operating system supporting this option to use hardware

capabilities provided by Intel’s Virtualization Technology for directed I/O.

• Disabled—Does not enable a hypervisor or operating system supporting this option to use

hardware capabilities provided by Intel’s Virtualization Technology for directed I/O.

3. Save your setting.

Enabling x2APIC Opt Out (m710x and m710x-L server blades)

Use this option to prevent the OS from enabling Extended xAPIC (x2APIC) mode if your OS does not
work with x2APIC. This option is disabled by default.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > System Options > Virtualization Options > X2APIC Opt Out and press Enter.

2. Select a setting and press Enter.

a. Enabled — Opt out from Extended xAPIC (x2APIC) mode

b. Disabled — Use Extended xAPIC (x2APIC) mode

3. Press F10.

Boot Time Optimizations

• Extended Memory Test

• Memory Fast Training

Extended Memory Test

Use this option to configure whether the system validates memory during the memory initialization
process. When enabled, and uncorrectable memory errors are detected, the memory is mapped out, and
the failed DIMMs are logged to the IML.

NOTE:

When enabled, this setting might significantly increase system boot time.

Configuring System Options 45

Enabling or disabling Extended Memory Test

Use the Extended Memory Test option to configure whether the system validates memory during the
memory initialization process. When enabled, and uncorrectable memory errors are detected, the
memory is mapped out, and the failed DIMMs are logged to the IML.

NOTE: Enabling this option might significantly increase boot time.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > System Options > Boot Time Optimizations > Extended Memory Test.

2. Select a setting.

• Enabled

• Disabled

3. Save your setting.

Memory Fast Training

Use this option to configure memory training on server reboots. When enabled, the platform uses the
previously saved memory training parameters determined from the last cold boot of the server, which
improves server boot time. Hewlett Packard Enterprise recommends that you leave Memory Fast Training
enabled.

Enabling or disabling Memory Fast Training

Use the Memory Fast Training option to configure memory training on server reboots. When enabled,
the platform uses the previously saved memory training parameters determined from the last cold boot of
the server, which improves server boot time. When installed on your server, and this setting is enabled,
NVDIMM-N Memory contents are left undisturbed during warm resets. If Memory Fast Training is
disabled, each warm reset is upgraded to a cold reset and results in an NVDIMM-N backup and restore.
Hewlett Packard Enterprise recommends that you leave Memory Fast Training enabled.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > System Options > Boot Time Optimizations > Memory Fast Training.

2. Select a setting.

• Enabled—Enables the server to use previously saved memory training parameters.

• Disabled—The platform performs a full memory training on every server reboot.

3. Save your setting.

Memory Operations

IMPORTANT: UEFI System Utilities Memory Operations options vary by platform and the

components that are installed on your server. Therefore, you might not see some of the options that
are documented here.

46 Configuring System Options

• Advanced Memory Protection

• NVDIMM Memory Options (if installed and supported on your server model)

Advanced Memory Protection

Use this option to configure additional memory protection with Error Checking and Correcting (ECC).
Advanced ECC Support provides the largest memory capacity to the operating system. Other options
are not supported when NVDIMMs are installed. Selecting one of the unsupported options when
NVDIMMs are installed generates messages that are displayed in the IML, and the NVDIMMs are
disabled until the configuration is set to Advanced ECC Support. When Advanced Memory Protection is
set to Advanced ECC Support, Advanced Memory Protection is hidden (greyed out) in the menu.

Configuring Advanced Memory Protection

Use the Advanced Memory Protection option to configure additional memory protection with Error
Checking and Correcting (ECC). Advanced ECC Support provides the largest memory capacity to the
operating system, and is the required setting when NVDIMMs are installed on your server. Other options
are not supported when NVDIMMs are installed. Selecting one of the unsupported options when
NVDIMMs are installed generates messages that are displayed in the IML, and the NVDIMMs are
disabled until the configuration is set to Advanced ECC Support. When Advanced Memory Protection is
set to Advanced ECC Support, the Advanced Memory Protection option is hidden (greyed out) in the
menu.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Memory Options > Advanced Memory Protection.

2. Select a setting.

• HPE Fast Fault Tolerant (ADDDC)—Enables the system to correct memory errors and continue to

operate in cases of multiple DRAM device failures on a DIMM. Provides protection against
uncorrectable memory errors beyond what is available with Advanced ECC.

• Advanced ECC Support—Provides the largest memory capacity to the operating system while

protecting the system against all single-bit failures and some multi-bit failures.

• Online Spare with Advanced ECC Support—Enables the system to automatically map out a

group of memory that is receiving excessive correctable memory errors. This memory is replaced
by a spare group of memory.

• Mirrored Memory with Advanced ECC Support—Provides the maximum protection against

uncorrected memory errors that might otherwise result in a system failure. You must install
additional memory to provide mirrored memory to the operating system.

3. Save your settings.

Configuring System Options 47

Configuring Boot Options

Boot Options

• Boot Mode (available for the m710x and m710x-L server blades)

• UEFI Optimized Boot

• Boot Order Policy

• UEFI Boot Order

• Advanced UEFI Boot Maintenance

• Legacy BIOS Boot Order (available for the m710x and m710x-L server blades)

Boot Mode

Use this option to set the boot mode for the system. ProLiant Gen9 servers and Synergy compute
modules provide two boot mode configurations: UEFI Mode and Legacy BIOS Mode. Certain boot options
require that you select a specific boot mode.

By default, the boot mode is set to UEFI Mode. The system must boot in UEFI Mode to use the following
options:

• Secure Boot

• UEFI Optimized Boot

• Generic USB Boot

• IPv6 PXE Boot

• iSCSI Boot

• Boot from URL

NOTE: The boot mode you use must match the operating system installation. If not, changing the boot
mode can impact the ability of the server to boot to the installed operating system.

Selecting the boot mode

Prerequisites

When booting to UEFI Mode, leave UEFI Optimized Boot enabled so that the system uses native UEFI
graphic drivers.

NOTE: The Legacy Boot Mode option is available for the m710x and m710x-L server blades.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Boot Options > Boot Mode and press Enter.

2. Select a setting and press Enter.

48 Configuring Boot Options

a. UEFI Mode (default)—Configures the system to boot to a UEFI compatible operating system.

b. Legacy Boot Mode—Available for m710x and m710x-L server blades. Configures the system to

boot to a traditional operating system in Legacy Boot compatibility mode.

3. Press F10.

4. Reboot the server.

UEFI Optimized Boot

Use this option to control whether the system BIOS boots using native UEFI graphic drivers. Leave it
enabled for compatibility with VMware ESXi on a system configured for UEFI Boot Mode, and to enable
and use Secure Boot Mode.

Before changing this setting, consider the following:

• If you are running a Microsoft Windows 2008 R2 operating system, and the system is configured for
UEFI Boot Mode, this option must be set to disabled. Legacy BIOS Mode components are needed for
video operations in Windows.

• Boot Mode must be set to UEFI Mode when this option is enabled.

• This option must be enabled to:

Enable and use Secure Boot.

Operate VMware ESXi.

Enabling or disabling UEFI Optimized Boot

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Boot Options > UEFI Optimized Boot and press Enter.

2. Select an option and press Enter.

a. Enabled—Configures the system BIOS to boot using native UEFI graphic drivers.

b. Disabled—Configures the system BIOS to boot using INT10 legacy video expansion ROM.

3. Press F10.

Boot Order Policy

Use this option to control the system behavior when attempting to boot devices per the UEFI Boot Order
list and no bootable device is found.

Setting the boot order policy

Use the Boot Order Policy option to control the system behavior when attempting to boot devices per
the UEFI Boot Order list and no bootable device is found.

Configuring Boot Options 49

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Boot Options > Boot Order Policy.

2. Select a setting.

• Retry Boot Order Indefinitely—The system continuously attempts the boot order until a bootable

device is found.

• Attempt Boot Order Once—The system attempts to execute all items in the boot menu once, and

halts the system.

• Reset After Failed Boot Attempt—The system attempts to execute all items once, and reboots

the system.

3. Save your setting.

UEFI Boot Order

Use this option to change the order in which entries in the UEFI Boot Order list boot.

You can also configure the UEFI Boot Order list using the RESTful Interface Tool. See the RESTful
Interface Tool documentation at: http://www.hpe.com/info/restfulinterface/docs..

Changing the UEFI boot order

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Boot Options > UEFI Boot Order and press Enter.

2. Use the arrow keys to navigate within the boot order list.

3. Press the + key to move an entry higher in the boot list.

4. Press the - key to move an entry lower in the list.

5. Press F10.

Advanced UEFI Boot Maintenance

• Add Boot Option

• Delete Boot Option

Add Boot Option

Use this option to select an x64 UEFI application with an .EFI extension, such as an OS boot loader or
other UEFI application, to add as a new UEFI boot option.

The new boot option is appended to the UEFI Boot Order list. When you select a file, you are prompted to
enter the boot option description (which is then displayed in the boot menu), as well as any optional data
to be passed to an .EFI application.

50 Configuring Boot Options

Adding a boot option to the UEFI Boot Order list

Procedure

1. Attach media with a FAT16 or FAT32 partition on it.

2. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Boot Options > Advanced UEFI Boot Maintenance > Add Boot Option and press Enter.

3. Browse for an .EFI application from the list and press Enter.

4. If necessary, continue to press Enter to drill-down through the menu options.

5. Enter a boot option description and optional data and press Enter.

The new boot option appears in the UEFI Boot Order list.

6. Select Commit changes and exit to save your selection.

Delete Boot Option

Use this option to delete one or more applications from the UEFI Boot Order list.

Deleting boot options from the UEFI Boot Order list

NOTE: If a deleted option points to a standard boot location, such as a network PXE boot or a removable

media device, the system BIOS adds the option on the next reboot.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Boot Options > UEFI Boot Settings > Delete Boot Option.

2. Select one or more options from the list.

3. Select Commit Changes and Exit.

Configuring Boot Options 51

Configuring Network Options

Network Options

• Network Boot Options

• Pre-boot Network Settings

• iSCSI Boot Configuration

• VLAN Configuration

Network Boot Options

• IPv6 DHCP Unique Identifier

• Network Boot Retry Support

• Network Interface Cards (NICs)

• PCIe Slot Network Boot

UEFI PXE Boot Policy

Use this option to set the order of network boot targets in the UEFI Boot Order list. When set to Auto,
new network boot targets are added to the end of the list according to the default policy of the system
ROM.

NOTE: When both IPv4 and IPv6 are enabled, each network boot target appears twice in the UEFI Boot
Order list (one for IPv4 and the other for IPv6).

Setting the UEFI PXE Boot Policy

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Network Options > Network Boot Options > UEFI PXE Boot Policy and press Enter.

2. Select a setting and press Enter.

a. Auto—Modifies the order of the existing network boot targets in the UEFI Boot Order list. New

network boot targets are added to the end of the list using the system ROM's default policy.

b. IPv4 then IPv6—Modifies the UEFI Boot Order list to include all existing IPv4 targets before any

existing IPv6 targets. New network IPv4 boot targets are added before IPv6 targets.

c. IPv4—Removes all existing IPv6 network boot targets in the UEFI Boot Order list. New IPv6

network boot targets are not added to the list.

52 Configuring Network Options

d. IPv6—Removes all existing IPv4 network boot targets in the UEFI Boot Order list. New IPv4

network boot targets are not added to the list.

e. IPv6 then IPv4—Modifies theUEFI Boot Order list to include all existing IPv4 targets before any

existing IPv6 targets. New network IPv6 boot targets are added before IPv4 targets.

3. Press F10.

IPv6 DHCP Unique Identifier

Use this option to control how the IPv6 DHCP Unique Identifier (DUID is set. Auto, the default setting,
sets the DUID using the Universal Unique Identifier (UUID) of the server or, if the server is not available,
the Link-Layer Address Plus Time (DUID-LLT) method. When set to DUID-LLT, the DUID is set based on
the Link-Layer Address Plus Time (DUID-LLT) method.

Setting the IPv6 DHCP Unique Identifier method

Use the IPv6 DHCP Unique Identifier option to control how the IPv6 DHCP Unique Identifier (DUID is set.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Network Options > Network Boot Options > IPv6 DHCP Unique Identifier.

2. Select a setting.

• Auto—Sets the DUID using the Universal Unique Identifier (UUID) of the server or, if the server is

not available, the Link-Layer Address Plus Time (DUID-LLT) method.

• DUID-LLT—Sets the DUID using the Link-Layer Address Plus Time (DUID-LLT) method.

3. Save your changes.

Network Boot Retry Support

Use this option to enable or disable the network boot retry function. By default, the system BIOS attempts
to boot the network device, such as a PXE device, up to 20 times before attempting to boot the next Initial
Program Load (IPL) device.

Enabling or disabling Network Boot Retry Support

Use the Network Boot Retry Support option to enable or disable the network boot retry function. When
enabled, the system BIOS attempts to boot the network device up to the number of times set in the
Network Boot Retry Count option before attempting to boot the next network device. This setting only
takes effect when attempting to boot a network device from the F12 function key and one-time boot
options.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Network Options > Network Boot Options > Network Boot Retry Support.

2. Select a setting.

Configuring Network Options 53

• Enabled—Enables network boot retry.

• Disabled—Disables network boot retry.

3. Save your changes.

Network Interface Cards (NICs)

Use this option to enable or disable network boot (PXE or FCoE) for an installed NIC. Devices listed vary
from system to system and can include, for example:

• Embedded LOM 1 Port 1

• Embedded FlexibleLOM 1 Port 1

NOTE: You might need to configure the NIC firmware to activate the boot option.

Enabling or disabling network boot for a NIC

Use the Network Interface Cards (NICs) option to enable or disable network boot for an installed NIC.
Devices listed vary from system to system and can include, for example:

• Embedded LOM 1 Port 1

• Embedded FlexibleLOM 1 Port 1

NOTE: You might need to configure the NIC firmware to activate the boot option.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Network Options > Network Boot Options.

2. Select a NIC.

3. Select a setting.

• Network Boot—Enables network boot.

• Disabled—Disables network boot.

4. Save your changes.

5. If you selected Network Boot, reboot the server so that the NIC boot option appears in the boot order

list.

PCIe Slot Network Boot

Use this option to enable or disable UEFI PXE boot for NIC cards in PCIe slots. Devices listed vary from
system to system and can include, for example:

• Slot 3 NIC Port 1 Boot

• Slot 3 NIC Port 2 Boot

54 Configuring Network Options

Enabling or disabling PCIe Slot Network Boot

Use the PCIe Slot Network Boot option to enable or disable UEFI network boot for NIC cards in PCIe
slots.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Network Options > Network Boot Options > PCIe Slot Network Boot.

2. Select a PCIe slot entry.

3. Select a setting.

• Enabled—Enables UEFI network boot for NIC cards in PCIe slots.

• Disabled—Disables UEFI network boot for NIC cards in PCIe slots.

4. Save your changes.

Pre-Boot Network Settings

Use this option to configure a preboot network interface and related settings.

IMPORTANT: If you plan to run webclient or ftp over the same interface, you do not need to
use the Embedded UEFI Shell ifconfig command on a network interface. The Pre-Boot
Network Settings configured in the System Utilities automatically selects these interface.

If the interface used by ftp and webclient are configured by ifconfig, that setting is erased.
Instead, the System Utilities Pre-Boot Network Settings menu is applied on the interface when the
commands are run.

• Pre-Boot Network Interface—Specifies the network interface used for preboot network connections.

◦ Auto (default)—The system uses the first available port with a network connection.

◦ Select Specific Port — The system uses the selected NIC port.

• DCHPv4 — Enables or disables obtaining the preboot network IPv4 configuration from a DHCP server
for Network operations from the Embedded UEFI Shell.

◦ Enabled — Enables DHCPv4 network address configuration. Individual settings are not available.

◦ Disabled — Disables DHCPv4 address configuration, requiring you to configure the following static

IP address settings manually.

– IPv4 Address

– IPv4 Subnet Mask

– IPv4 Gateway

– IPv4 Primary DNS

– IPv4 Secondary DNS

Configuring Network Options 55

Configuring Pre-Boot Network Settings

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Network Options > Pre-Boot Network Settings.

2. Select any of the Pre-boot Network Settings options.

3. Select additional settings or enter additional values for that option.

4. Save your changes.

iSCSI Boot Configuration

NOTE: You can also configure iSCSI Boot settings using the RESTful Interface Tool. See the RESTful
Interface Tool documentation at: http://www.hpe.com/info/restfulinterface/docs.

iSCSI Initiator Name

Use this option to set a name for the iSCSI initiator using iSCSI Qualified Name (IQN) format. EUI format
is not supported. This option overrides the default name set for the initiator.

Adding an iSCSI initiator name

Use the iSCSI Initiator Name option to set a name for the iSCSI initiator using iSCSI Qualified Name
(IQN) format. EUI format is not supported. This option replaces the default name set for the initiator.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Network Options > iSCSI Boot Configuration > iSCSI Initiator Name.

2. Enter a unique name for the iSCSI initiator using iSCSI Qualified Name (IQN) format. For example:

iqn.2001–04.com.example:uefi-13021088.

This setting is saved automatically.

Add an iSCSI Boot Attempt

Use this option to configure an iSCSI boot target.

Adding an iSCSI boot attempt

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Network Options > iSCSI Boot Configuration > Add an iSCSI Boot Attempt.

A message appears stating that this boot attempt will not be in effect until the next server reboot.

2. Press Enter.

3. Select a port on which to attempt iSCSI connection.

4. Complete the configuration settings.

56 Configuring Network Options

• iSCSI Attempt Name—Enter a name.

• iSCSI Boot Control—Select Enabled. (The default setting is Disabled).

• IP Address Type—Select an address type.

• Connection Retry Count—Enter a value from 0 to 16. Default is 3 retries.

• Connection Timeout—Enter a value in ms from 100 to 20000. Default is 20000 (20 seconds).

• Initiator DHCP—This is the default setting. If you must configure static IP addresses for the

Initiator, clear this option. The target name, IP address, port, and boot LUN must also be configured
manually (disable Target DHCP Config) if you configure static addresses for the Initiator.

• Target DHCP Config—This is the default setting. If you must configure the target settings

manually, clear this check box) and enter a target name, IP address, port, and boot LUN.

• Optional: Authentication Type—Default is NONE. If required, select CHAP and complete the

CHAP entries.

5. Select Save Changes.

Delete iSCSI Boot Attempts

Use this option to delete one or more iSCSI boot targets.

Deleting iSCSI boot attempts

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Network Options > iSCSI Boot Configuration > Delete iSCSI Boot Attempts.

2. Select one or more iSCSI boot attempt entries.

3. Select Commit Changes and Exit.

iSCSI Attempts

Use this option to view or modify the details of iSCSI boot attempts.

Viewing and modifying iSCSI boot attempt details

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Network Options > iSCSI Boot Configuration > iSCSI Attempts.

2. Select an entry from the list.

3. View or modify the details about the boot attempt.

VLAN Configuration

Use this option to set the global VLAN configuration for all enabled network interfaces, including those
used in PXE boot, iSCSI boot, and HTTP boot, and for all pre-boot network access from the Embedded
UEFI Shell.

Configuring Network Options 57

Configuring VLAN Configuration

Use the VLAN Configuration option to configure global VLAN settings for all enabled network interfaces.
The configuration includes interfaces used in PXE boot, iSCSI boot, and HTTP/HTTPS boot, and for all
preboot network access from the Embedded UEFI Shell.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Network Options > VLAN Configuration.

2. Complete the following.

a. VLAN Control—Select Enabled to enable VLAN tagging on all enabled network interfaces. This

setting is disabled by default.

b. VLAN ID—When VLAN Control is enabled, enter a VLAN ID between 1 and 4094.

c. VLAN Priority—When VLAN Control is enabled, enter a priority value of 0 to 7 for VLAN tagged

frames.

3. Save your changes.

58 Configuring Network Options

Configuring Storage Options

Storage Options

• Fibre Channel/FCoE Scan Policy

• Embedded Storage Boot Policy

• PCIe Storage Boot Policy

Fibre Channel/FCoE Scan Policy

Use this option to change the default policy for scanning for valid FC/FCoE (or boot from SAN) boot
targets. By default, each installed FC/FCoE adapter only scans targets that are preconfigured in the
device settings.

NOTE: For Fibre Channel controllers in PCIe slots, this setting is overridden by the PCIe Storage Boot
Policy setting.

Changing the default Fibre Channel/FCoE scanning policy

Prerequisites

Boot Mode is set to UEFI Mode.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Storage Options > Fibre Channel/FCoE Scan Policy and press Enter.

2. Select a setting and press Enter.

a. Scan All Targets — Each installed FC/FCoE adapter scans all available targets.

b. Scan Configured Targets Only — Each installed FC/FCoE adapter only scans targets that are

preconfigured in the device settings. This setting overrides any individual device settings configured
in the device-specific setup.

3. Press F10.

Embedded Storage Boot Policy

Use this option to select the UEFI BIOS boot targets for embedded storage controllers. By default, all
valid boot targets attached to the storage controller are available to the UEFI Boot Order list.

Setting the embedded storage boot policy

Prerequisites

Boot Mode is set to UEFI Mode.

Configuring Storage Options 59

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Storage Options > Embedded Storage Boot Policy and press Enter.

2. Select a storage controller and press Enter.

3. Select a setting and press Enter.

a. Boot All Targets — All valid boot targets attached to the storage controller are available to the

UEFI Boot Order list.

b. Boot Limit to 3 Targets — A maximum of three boot targets attached to the storage controller are

available to the UEFI Boot Order list.

c. Boot No Targets — No boot targets attached to the storage controller are available to the UEFI

Boot Order list.

4. Press F10.

PCIe Storage Boot Policy

Use this option to select the UEFI BIOS boot targets for storage controllers in PCIe slots.

NOTE: This setting overrides the Fibre Channel/FCoE Scan Policy setting for Fibre Channel controllers in
PCIe slots.

Setting the PCIe storage boot policy

Use the PCIe Storage Boot Policy option to select the UEFI BIOS boot targets for storage controllers in
PCIe slots.

NOTE: This setting overrides the Fibre Channel/FCoE Scan Policy setting for Fibre Channel controllers in
PCIe slots.

Prerequisites

Boot Mode is set to UEFI Mode.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Storage Options > PCIe Storage Boot Policy.

2. Select a storage controller and press Enter.

3. Select a setting and press Enter.

4. Press F10.

60 Configuring Storage Options

Configuring the Embedded UEFI Shell

Embedded UEFI Shell options

• Embedded UEFI Shell

• Add Embedded UEFI Shell to Boot Order

• UEFI Shell Script Auto-Start

• Shell Auto-Start Script Location

• Network Location for Shell Auto-Start Script

Embedded UEFI Shell

Use this option to enable or disable the Embedded UEFI Shell, a pre-boot command-line environment for
scripting and running UEFI applications, including UEFI boot loaders. The Embedded UEFI Shell also
provides CLI-based commands you can use to obtain system information, and to configure and update
the system BIOS. When enabled, and Add Embedded UEFI Shell to Boot Order is enabled, the
Embedded UEFI Shell is added to the UEFI Boot Order list.

For details on running Shell scripts, see the UEFI Shell User Guide for HPE ProLiant Gen9 Servers and
HPE Synergy.

Enabling or disabling the Embedded UEFI Shell

Use the Embedded UEFI Shell option to enable or disable the pre-boot command-line environment for
scripting and running UEFI applications, including UEFI boot loaders. The Embedded UEFI Shell also
provides CLI-based commands you can use to obtain system information, and to configure and update
the system BIOS. When enabled, and Add Embedded UEFI Shell to Boot Order is enabled, the
Embedded UEFI Shell is added to the UEFI Boot Order list.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Embedded UEFI Shell > Embedded UEFI Shell.

2. Select a setting.

• Enabled—Enables you to launch the Embedded UEFI Shell from the pre-boot environment and

add it to the UEFI Boot Order list.

• Disabled—The Embedded UEFI Shell is not available in the pre-boot environment and you

cannot add it to the UEFI Boot Order list.

3. Save your setting.

Add Embedded UEFI Shell to Boot Order

Use this option to add the Embedded UEFI Shell as an entry in the UEFI Boot Order list on the next
reboot of the server.

Configuring the Embedded UEFI Shell 61

Adding the Embedded UEFI Shell to the UEFI Boot Order list

Prerequisite

Boot Mode is set to UEFI Mode.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Embedded UEFI Shell > Add Embedded UEFI Shell to Boot Order.

2. Select a setting.

• Enabled—Adds the embedded UEFI Shell to the boot order list on the next reboot.

• Disabled—The embedded UEFI Shell is not added to the boot order list.

3. Save your setting.

UEFI Shell Script Auto-Start

Use this option to enable or disable automatic execution of the Embedded UEFI Shell startup script
during Shell startup.

• You can use the startup script to create a RAM disk, download files from the network, collect data,
upload results back to network, and then boot to the OS without rebooting the system.

• You can store the script file on local media, or access it from a network location.

• Name the script file startup.nsh and place it on local media or a network location accessible to the
server.

• When auto-start is enabled, and the Shell Auto-Start Script Location option is set to Auto, the Shell
looks for the script file in any of the FAT16 or FAT32 file systems available.

• It is recommended that you have only one startup.nsh file on one file system.

Enabling or disabling automatic execution of the Embedded UEFI Shell startup script

Use the UEFI Shell Script Auto-Start option to enable or disable automatic execution of the Embedded
UEFI Shell startup script during Shell startup.

• You can use the startup script to create a RAM disk, download files from the network, collect data,
upload results back to network, and then boot to the OS without rebooting the system.

• You can store the script file on local media, or access it from a network location.

• Name the script file startup.nsh and place it on local media or a network location accessible to the
server.

• When auto-start is enabled, and the Shell Auto-Start Script Location option is set to Auto, the Shell
looks for the script file in a network location first, followed by any locally attached FAT16, or FAT32­formatted media.

• It is recommended that you have only one startup.nsh file on one file system.

62 Configuring the Embedded UEFI Shell

Prerequisites

• Boot Mode is set to UEFI Mode.

• Embedded UEFI Shell is enabled.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Embedded UEFI Shell > UEFI Shell Script Auto-Start.

2. Select a setting.

• Enabled—The UEFI Shell startup script executes during Shell startup.

• Disabled—The UEFI Shell startup script does not execute during Shell startup.

3. Save your setting.

Shell Auto-Start Script Location

Use this option to select the location of the Embedded UEFI Shell startup script. When UEFI Shell Script
Auto-Start is enabled, this setting specifies where the Shell looks for the startup.nsh file. When set to
Auto, the Shell looks for the script file in any of the FAT16 or FAT32 file systems available.

Setting the Embedded UEFI Shell startup script location

Use the Shell Auto-Start Script Location option to select the location of the Embedded UEFI Shell
startup script. When UEFI Shell Script Auto-Start is enabled, this setting specifies where the Shell looks
for the startup.nsh file.

Prerequisites

• Embedded UEFI Shell is enabled.

• UEFI Shell Script Auto-Start is enabled.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Embedded UEFI Shell > Shell Auto-Start Script Location.

2. Select a setting.

• Auto—The Shell attempts to retrieve the startup script from the network location first, followed by

locally attached media.

• File Systems on Attached Media—The Shell looks for the startup.nsh script file on a UEFI-

accessible local file system, such as a FAT32 partition on a USB disk or HDD.

• Network Location—The Shell looks for a .nsh script at an HTTP/HTTPS or FTP location

accessible to the system.

3. Save your setting.

Configuring the Embedded UEFI Shell 63

Network Location for Shell Auto-Start Script

Use this option to set the network URL location of the UEFI Shell startup script.

• You can specify a URL in HTTP or FTP format using either an IPv4 server address or host name.

• The script file at the location must end with a .nsh file extension.

• When UEFI Shell Script Auto-Start is enabled, and the Shell Auto-Start Script Location is set to
Network Location, the Shell attempts to load and execute the startup script from the network location
pointed to by the specified URL.

NOTE:

IPv6 server addresses are not supported.

Setting the network location for the Shell auto-start script

Prerequisites

• Embedded UEFI Shell is enabled.

• Shell Auto-Start Script Location is set to Network Location or Auto.

• Discover Shell Auto-Start Script using DHCP is disabled.

• When specifying and HTTPS URL, the TLS certificate of the HTTPS server is configured using Server

Security > TLS (HTTPS) Options.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Embedded UEFI Shell > Network Location for Shell Script-Auto Start.

2. Enter the network location of the .nsh file. Valid values are:

• An HTTP/HTTPS URL for either an IPv4 or IPv6 server address or host name.

• An FTP URL for either an IPv4 or IPv6 server address or host name.

Examples:

◦ http://192.168.0.1/file/file.nsh

◦ http://example.com/file/file.nsh

◦ https://example.com/file/file.nsh

◦ http://[1234::1000]/file.nsh

3. Save your setting.

64 Configuring the Embedded UEFI Shell

Configuring Power Management

Power Management options

• Power Profile

• Power Regulator

• Minimum Processor Idle Power Core C-State

• Minimum Processor Idle Power Package C-State

• Advanced Power Options

Power Profile

Use this option to select a power profile based on power and performance characteristics. Balanced
Power and Performance, the default setting, provides optimum settings to maximize power savings with

minimal impact to performance for most operating systems and applications.

The following table shows Power Profile settings and the Power Management options supported by
each profile. For a description of each option, see the following procedures.

NOTE:

• Not all the options in this table are adjustable on all servers. However, even if you do not have the
option of adjusting some of these settings, they default to the values shown here.

• When you select Custom as your Power Profile setting, all available settings for the Power

Management options are available to customize your configuration.

Power
Management
option

Power Regulator Dynamic Power

Minimum
Processor Idle
Power Core C­State

Minimum
Processor Idle
Power Package C­State

Power Profile settings

Balanced Power
and Performance

Savings Mode

C6 State C6 State No C-states All available

Package C6
(retention) State

Minimum Power
Usage

Static Low Power
Mode

Package C6
(retention) State

Maximum
Performance

Static High
Performance Mode

No Package State All available

Custom

All available
options.

options.

options.

Advanced Power Management option

Table Continued

Configuring Power Management 65

Power
Management
option

Power Profile settings

Balanced Power
and Performance

Minimum Power
Usage

Maximum
Performance

Custom

Energy/
Performance Bias

Maximum Memory
Bus Frequency

Channel
Interleaving

Maximum PCI
Express Speed

Intel DMI Link
Frequency

Balanced
Performance

Auto 1333 MHz Auto All available

Enabled Disabled Enabled All available

Maximum
Supported

Auto Auto Auto All available

Setting a power profile

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Power Management > Power Profile and press Enter.

2. Select a setting and Enter.

Power Savings
Mode

PCIe Generation 1 Maximum

Maximum
Performance

Supported

All available
options.

options.

options.

All available
options.

options.

a. Balanced Power and Performance—Provides optimum settings to maximize power savings with

minimal impact to performance for most operating systems and applications.

b. Minimum Power Usage—Enables power reduction mechanisms that can negatively affect

performance. This mode guarantees a lower maximum power usage by the system.

c. Maximum Performance—Disables all power management options that can negatively affect

performance.

d. Custom—Enables you to configure settings for your environment.

3. Press F10.

Power Regulator

When Power Profile is set to Custom, use this option to set the power regulator mode. Power regulator
settings can help you increase server efficiency and manage power consumption. Dynamic Power

Savings Mode automatically varies processor speed and power usage based on processor utilization.

NOTE: Certain processors support only one power state and operate at their initialized frequency,
regardless of the selected Power Regulator mode.

66 Configuring Power Management

Setting the Power Regulator mode

Prerequisites

Power Profile is set to Custom.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Power Management > Power Regulator and press Enter.

2. Select a setting and press Enter.

a. Dynamic Power Savings Mode — Automatically varies processor speed and power usage based

on processor utilization. This mode uses an ROM-based algorithm to monitor processor activity. It
can reduce overall power consumption with little or no impact to performance, and does not require
OS support.

b. Static Low Power Mode — Reduces processor speed and power usage. Guarantees a lower

maximum power usage for the system. This mode is useful in environments where power
availability is constrained and it is critical to lower the maximum power use of the system.

c. Static High Performance Mode — Processors run in the maximum power and performance state,

regardless of the OS power management policy. This mode is useful in environments where
performance is critical and power consumption is less important.

d. OS Control Mode — Processors run in their maximum power and performance state at all times,

unless the OS enables a power management policy.

3. Press F10.

Minimum Processor Idle Power Core C-State

When the Power Profile is set to Custom, use this option to select the lowest idle power (C-State) of the
processor that the operating system uses. The higher the C-State, the lower the power usage of that idle
state. .

Setting the minimum processor idle power core C-State

Prerequisites

Power Profile is set to Custom.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Power Management > Minimum Processor Idle Power Core C-State and press Enter.

2. Select a setting and press Enter.

a. C6 State

b. C3 State

Configuring Power Management 67

c. C1E State

d. No C-states

3. Press F10.

Minimum Processor Idle Power Package C-State

When the Power Profile is set to Custom, use this option to configure the lowest processor idle power
state (C-State). The processor automatically transitions into package C-States based on the Core C­States in which cores on the processor have transitioned. The higher the package C-State, the lower the
power usage of that idle package state.

NOTE:

This option is available on servers with Intel processors.

Setting the Minimum Processor Idle Power Package C­State

Prerequisites

Power Profile is set to Custom.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Power and Performance Options > Minimum Processor Idle Power Package C-State.

2. Select a setting.

• Package C6 (retention) State

• Package C6 (non-retention) State

• No Package State

3. Press F10.

Advanced Power Options

• Energy/Performance Bias

• Maximum Memory Bus Frequency

• Maximum PCI Express Speed

• Dynamic Power Savings Mode Response

• Collaborative Power Control`

• Redundant Power Supply Mode

• Intel DMI Link Frequency

68 Configuring Power Management

Energy/Performance Bias

When Power Profile is set to Custom, use this option to configure several processor subsystems to
optimize the processor’s performance and power usage. Balanced Performance provides optimum
power efficiency and is recommended for most environments.

NOTE:

Options vary by installed processors.

Setting the Energy/Performance Bias

Prerequisites

Power Profile is set to Custom.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Power Management > Advanced Power Options > Energy/Performance Bias and press
Enter.

2. Select a setting and press Enter.

a. Maximum Performance — Provides the highest performance and lowest latency. Use this setting

for environments that are not sensitive to power consumption.

b. Balanced Performance — Provides optimum power efficiency and is recommended for most

environments.

c. Balanced Power — Provides optimum power efficiency based on server utilization.

d. Power Savings Mode — Provides power savings for environments that are power sensitive and

can accept reduced performance.

3. Press F10.

Maximum Memory Bus Frequency

When Power Profile is set to Custom, use this option to configure the system to run memory at a lower
maximum speed than that supported by the installed processor and DIMM configuration. Auto enables
memory to run at the maximum speed supported by the system configuration.

Setting the maximum memory bus frequency

Prerequisites

Power Profile is set to Custom.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Power Management > Advanced Power Options > Maximum Memory Bus Frequency
and press Enter.

2. Select a setting and press Enter.

Configuring Power Management 69

a. Auto — Memory runs at the maximum speed supported by the system configuration. Use this

setting for best NVDIMM-N performance.

(default)

b. 1333MHz

c. 1066MHz

d. 800MHz

3. Press F10.

Maximum PCI Express Speed

When Power Profile is set to Custom, use this option to lower the maximum PCI Express speed at
which the server enables PCI Express devices to operate. Doing so can resolve issues with problematic
PCI Express devices. Maximum Supported, the default setting, enables the platform to run at the
maximum speed supported by the platform or the PCIe device (whichever is lower.)

NOTE: Changing this setting from the default of Maximum Supported might affect the performance of
high-end cards, such as 10GbE NIC cards and I/O accelerators.

Setting the maximum PCI Express speed

Prerequisites

Power Profile is set to Custom.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Power Management > Advanced Power Options > Maximum PCI Express Speed and
press Enter.

2. Select a setting and press Enter.

a. Maximum Supported — Configures the platform to run at the maximum speed supported by the

platform or the PCIe device (whichever is lower.)

b. PCIe Generation 1.0 — Configures the platform to run at PCIe Generation 1.0, the lowest speed

possible in the PCIe links.

3. Press F10.

Dynamic Power Savings Mode Response

When Power Profile is set to Custom, use this option to enable the system ROM to control processor
performance and power state depending on the processor workload. Fast enables a fast response time,
and is optimal for most workloads where low latency response to an increase in processor demand is a
requirement.

NOTE:

Depending on your processor workload, changing this option from Fast can negatively affect
performance.

70 Configuring Power Management

Setting the dynamic power savings mode response speed

Prerequisites

Power Profile is set to Custom.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Power Management > Advanced Power Options > Dynamic Power Savings Mode
Response and press Enter.

2. Select a setting and press Enter.

a. Fast — Sets a fast response time. This setting is optimal for most workloads where low latency

response to an increase in processor demand is a requirement.

b. Slow Sets a slow response time. This setting is optimal for workloads where a longer latency

response to an increase in processing demand is an acceptable trade off for reduced power
consumption.

3. Press F10.

Collaborative Power Control

When Power Profile is set to Custom, use this option to enable or disable collaborative power control.
For operating systems that support the Processor Clocking Control (PCC) interface, enabling
collaborative power control configures the operating system to request processor frequency changes,
even when the Power Regulator option is set to Dynamic Power Savings Mode on the server. For
operating systems that do not support the PCC Interface, or when the Power Regulator mode is not
configured for Dynamic Power Savings Mode, this option has no impact on system operation.

Enabling or disabling collaborative power control

Prerequisites

Power Profile is set to Custom.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Power Management > Advanced Power Options > Collaborative Power Control and
press Enter.

2. Select a setting and press Enter.

a. Enabled — The operating system requests processor frequency changes.

b. Disabled — The operating system does not request processor frequency changes.

3. Press F10.

Redundant Power Supply Mode

When Power Profile is set to Custom, use this option to set how the system handles redundant power
supply configurations. All High Efficiency Mode settings provide the most power efficient operation when

Configuring Power Management 71

you are using redundant power supplies by keeping half of the power standby mode at lower power
usage levels. Balanced Mode shares the power delivery equally between all installed power supplies.

Setting the redundant power supply mode

Prerequisites

Power Profile is set to Custom.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Power Management > Advanced Power Options > Redundant Power Supply Mode and
press Enter.

2. Select a setting and press Enter.

a. Balanced Mode — Shares the power delivery equally between all installed power supplies.

b. High Efficiency Mode (Auto) — The system selects between the odd or even power supply based

on a semi-random distribution within a group of systems.

c. High Efficiency Mode (Odd Supply Standby) — The system places the odd power supply in

standby.

d. High Efficiency Mode (Even Supply Standby) — The system places the even power supply in

standby.

3. Press F10.

Intel DMI Link Frequency

Use this option to force the link speed between the processor and south bridge to run at slower speeds.
Doing so can reduce power consumption, but can also impact system performance.

NOTE: You can configure this option on systems with two or more CPUs.

Setting Intel DMI Link Frequency

Use the Intel DMI Link Frequency option to force the link speed between the processor and south bridge
to run at slower speeds. Doing so can reduce power consumption, but can also impact system
performance.

NOTE: You can configure this option on systems with two or more CPUs.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Power and Performance Options > Intel DMI Link Frequency.

2. Select a setting.

72 Configuring Power Management

• Gen 1 Speed

• Gen 2 Speed

3. Save your setting.

Configuring Power Management 73

Configuring Performance Options

Performance Options

• Intel (R) Turbo Boost Technology

• ACPI SLIT Preferences

• Advanced Performance Tuning Options

Intel (R) Turbo Boost Technology

Use this option to enable or disable Intel Turbo Boost Technology. The technology controls whether the
processor transitions to a higher frequency than the processor's rated speed if the processor has
available power and is within temperature specifications.

Enabling or disabling Intel Turbo Boost Technology

Intel Turbo Boost Technology controls whether the processor transitions to a higher frequency than the

processor's rated speed if the processor has available power and is within temperature specifications.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Power and Performance Options > Intel(R) Turbo Boost Technology.

2. Select a setting.

• Enabled—Enables the logical processor cores on processors supporting Hyperthreading

technology.

• Disabled—Reduces power usage, and also reduces the system’s maximum achievable

performance under some workloads.

3. Save your setting.

Advanced Performance Tuning Options

• Node Interleaving

• Intel NIC DMA Channels (IOAT)

• HW Prefetcher

• Adjacent Sector Prefetcher

• DCU Stream Prefetcher

• DCU IP Prefetcher

• Memory Proximity Reporting for I/O

• I/O Non-posted Prefetching

74 Configuring Performance Options

• NUMA Group Size Optimization

• Intel Performance Monitoring Support

HW Prefetcher

Use this option to disable or enable the processor prefetch function. In most environments, leave it
enabled for optimal performance. With certain workloads, disabling this option might provide a
performance benefit. Do so only after performing application benchmarking to verify improved
performance in a particular environment.

NOTE:

This option is available on servers with Intel processors. Disabling this option is not recommended
because it can degrade system performance.

Enabling or disabling the Intel prefetch function

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Performance Options > Advanced Performance Tuning Options > HW Prefetcher and
press Enter.

2. Select a setting and press Enter.

a. Enabled

b. Disabled

3. Press F10.

Adjacent Sector Prefetcher

Use this option to disable or enable the adjacent sector prefetch function. In most environments, leave the
option enabled for optimal performance. With certain workloads, disabling it might provide a performance
benefit. Do so only after performing application benchmarking to verify improved performance in a
particular environment.

IMPORTANT:

Disabling this option is not recommended because it typically degrades system performance.

Enabling or disabling the adjacent sector prefetch function

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Performance Options > Advanced Performance Tuning Options > Adjacent Sector
Prefetch and press Enter.

2. Select a setting and press Enter.

Configuring Performance Options 75

a. Enabled

b. Disabled

3. Press F10.

DCU Stream Prefetcher

Use this option to enable or disable the DCU stream prefetch function. In most environments, leave the
option enabled for optimal performance. With certain workloads, disabling it might provide a performance
benefit. Do so only after performing application benchmarking to verify improved performance in a
particular environment.

Enabling or disabling the DCU stream prefetch function

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Performance Options > Advanced Performance Tuning Options > DCU Stream
Prefetcher and press Enter.

2. Select a setting and press Enter.

a. Enabled

b. Disabled

3. Press F10.

DCU IP Prefetcher

Use this option to enable or disable the DCU IP stream prefetch function. In most environments, leave the
option enabled for optimal performance. With certain workloads, disabling it might provide a performance
benefit. Do so only after performing application benchmarking to verify improved performance in a
particular environment.

Enabling or disabling the DCU IP stream prefetch function

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Performance Options > Advanced Performance Tuning Options > DCU IP Prefetcher
and press Enter.

2. Select a setting and press Enter.

a. Enabled

b. Disabled

3. Press F10.

76 Configuring Performance Options

Memory Proximity Reporting for I/O

Use this option to set whether the system ROM reports the proximity relationship between I/O devices
and system memory to the operating system. Most operating systems can use this information to
efficiently assign memory resources for devices, such as network controllers and storage devices.

NOTE:

Certain I/O devices might not be able to take advantage of I/O handling benefits if their OS drivers are not
properly optimized to support this feature. For more information, see your operating system and I/O
device documentation.

Enabling or disabling Memory Proximity Reporting for I/O

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Performance Options > Advanced Performance Tuning Options > Memory Proximity
Reporting for I/O and press Enter.

2. Select a setting and press Enter.

a. Enabled

b. Disabled

3. Press F10.

I/O Non-posted Prefetching

Use this option to enable or disable the I/O non-posted prefetch function. In most environments, leave the
option enabled for optimal performance. With certain workloads, disabling it might provide a performance
benefit. Do so only after performing application benchmarking to verify improved performance in a
particular environment.

Enabling or disabling I/O Non-posted Prefetching

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Performance Options > Advanced Performance Tuning Options > I/O Non-posted
Prefetching and press Enter.

2. Select a setting and press Enter.

a. Enabled

b. Disabled

3. Press F10.

NUMA Group Size Optimization

Use this option to configure how the system ROM reports the number of logical processors in a NUMA
(Non-Uniform Memory Access) node. The resulting information helps the operating system group
processors for application use.

Configuring Performance Options 77

Setting NUMA Group Size Optimization

Use the NUMA Group Size Optimization option to configure how the system ROM reports the number of
logical processors in a NUMA (Non-Uniform Memory Access) node. The resulting information helps the
operating system group processors for application use.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Power and Performance Options > NUMA Group Size Optimization.

2. Select a setting.

• Clustered—Optimizes groups along NUMA boundaries, providing better performance.

• Flat—Enables applications that are not optimized to take advantage of processors spanning

multiple groups to utilize more logical processors.

3. Save your setting.

Enabling maximum internal graphics frequency

Configures the maximum allowed frequency of the internal graphics device.

Procedure

1. From the System Utilities screen, select BIOS/Platform Configuration (RBSU) > Performance
Options > Advanced Performance Tuning Options > Maximum Internal Graphics Frequency and
press Enter.

2. Select one of the following:

• Enable

• Disable

3. Press Enter.

78 Configuring Performance Options

Configuring Server Security

Server Security options

• Set Power On Password

• Set Admin Password

• One-Time Boot Menu (F11 Prompt)

• Processor AES-NI Support

Set Power On Password

Use this option to set a password for accessing the server during the boot process. When you are
powering-on the server, a prompt appears where you enter the password to continue. To disable or clear
the password, enter the password followed by a / (slash) when prompted to enter the password.

NOTE:

In the event of an Automatic Server Recovery (ASR) reboot, the power-on password is bypassed and the
server boots normally.

Setting the power-on password

Use the Set Power On Password option to set a password for accessing the server during the boot
process. When you are powering on the server, a prompt appears where you enter the password to
continue. To disable or clear the password, enter the password followed by a / (slash) when prompted to
enter the password.

NOTE: In the event of an Automatic Server Recovery (ASR) reboot, the power-on password is bypassed
and the server boots normally.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Server Security > Set Power On Password.

2. Enter your password.

A password can be:

• 31 characters maximum

• Any combination of numbers, letters, and special characters

3. Confirm the password and press Enter.

A message appears confirming that the password is set.

4. Save your changes.

5. Reboot the server.

Configuring Server Security 79

Set Admin Password

Use this option to set an administrator password to protect the server configuration. If enabled, you are
prompted for this password before being allowed to modify the configuration.

Setting an administrator password

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Server Security > Set Admin Password.

2. Enter the password.

A password can be:

• 31 characters maximum

• Any combination of numbers, letters, and special characters

3. Confirm the password and press Enter.

A message appears confirming that the password is set.

4. Save your changes.

5. Reboot the server.

One-Time Boot Menu (F11 Prompt)

Use this option to control whether you can press the F11 key to boot directly to the One-Time Boot Menu
during the current boot. This option does not modify the normal boot order settings. When this option is
enabled, you can boot directly into the One-Time Boot Menu in the System Utilities by pressing F11 in
the POST screen after a server reboot. See One-Time Boot Menu options..

Enabling or disabling the One-Time Boot Menu F11 prompt

Use this option to control whether you can press the F11 key to boot directly to the One-Time Boot Menu
during the current boot. This option does not modify the normal boot order settings. When this option is
enabled, you can boot directly into the One-Time Boot Menu in the System Utilities by pressing F11 in the
POST screen after a server reboot.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Server Security > One-Time Boot Menu (F11 Prompt).

2. Select a setting.

• Enabled

• Disabled

3. Save your changes.

80 Configuring Server Security

No-Execute Protection

Use this option to enable or disable protection against malicious code and viruses on your system. When
enabled, memory is marked as non-executable unless the location contains executable code. If viruses
attempt to insert and execute code from non-executable memory locations, these viruses are intercepted
and an exception is generated.

NOTE:

Enable this option if you are using a Virtual Machine Manager, such as VMware ESX/ESXi and Windows
Hyper-V.

Enabling or disabling no-execute virus protection

Prerequisites

Your operating system must support this option for you to enable it.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > System Options > Server Security > No-Execute Protection and press Enter.

2. Select a setting and press Enter.

a. Enabled

b. Disabled

3. Press F10.

Processor AES-NI Support

Use this option to enable or disable the Advanced Encryption Standard Instruction Set in the processor.

Enabling or disabling processor AES-NI support

Use the Processor AES-NI option to enable or disable the Advanced Encryption Standard Instruction Set
in the processor.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Server Security > Processor AES-NI Support.

2. Select a setting.

• Enabled—Enables AES-NI support.

• Disabled—Disables AES-NI support.

3. Save your changes.

Secure Boot

Secure Boot is a server security feature that is implemented in the BIOS and does not require special
hardware. Secure Boot ensures that each component launched during the boot process is digitally signed

Configuring Server Security 81

and that the signature is validated against a set of trusted certificates embedded in the UEFI BIOS.
Secure Boot validates the software identity of the following components in the boot process:

• UEFI drivers loaded from PCIe cards

• UEFI drivers loaded from mass storage devices

• Preboot UEFI Shell applications

• OS UEFI boot loaders

When Secure Boot is enabled:

• Firmware components and operating systems with boot loaders must have an appropriate digital
signature to execute during the boot process.

• Operating systems must support Secure Boot and have an EFI boot loader signed with one of the
authorized keys to boot. For more information about supported operating systems, see the UEFI
System Utilities and Shell Release Notes on the Hewlett Packard Enterprise website (http://
www.hpe.com/info/ProLiantUEFI/docs.).

You can customize the certificates embedded in the UEFI BIOS by adding or removing your own
certificates, either from a management console directly attached to the server, or by remotely connecting
to the server using the iLO Remote Console.

You can configure Secure Boot using:

• The System Utilities options described in the following sections.

• The RESTful API. For more information, see the Hewlett Packard Enterprise website (www.hpe.com/
support/restfulinterface/docs).

You can use the secboot command in the Embedded UEFI Shell to display Secure Boot databases,
keys, and security reports.

Before you enable Secure Boot, make sure you:

Enable UEFI Optimized Boot.

Secure Boot Settings

• Secure Boot Enforcement

• Advanced Secure Boot Options

Secure Boot Enforcement

Use this setting to enable or disable Secure Boot.

Enabling or disabling Secure Boot

Prerequisites

Enable UEFI Optimized Boot.

82 Configuring Server Security

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Server Security > Secure Boot Settings > Secure Boot Enforcement and press Enter.

2. Select a setting and press Enter:

• Enabled — Enables Secure Boot.

• Disabled — Disables Secure Boot.

Advanced Secure Boot Options

• PK - Platform Key—Establishes a trust relationship between the platform owner and the platform
firmware.

• KEK - Key Exchange Key—Protects the signature database from unauthorized modifications. No
changes can be made to the signature database without the private portion of this key.

• DB - Allowed Signatures Database—Maintains a secure boot allowed signature database of
signatures that are authorized to run on the platform.

• DBX - Forbidden Signatures Database—Maintains a secure boot blacklist signature database of
signatures that are not authorized to run on the platform

• DBT - Timestamp Signatures Database—Maintains signatures of codes in the timestamp signatures
database.

• Delete all keys

• Export all keys

• Reset all keys to platform defaults

NOTE: Changing the default security certificates can cause the system to fail booting from some devices.
It can also cause the system to fail launching certain system software such as Intelligent Provisioning.

Platform Key (PK) Options

• Enroll PK

• Delete Platform Key (PK)

Enroll PK

Use this option to enroll a PK certificate. A Platform Key protects the next key from uncontrolled
modification.

Enrolling a PK certificate

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Server Security > Secure Boot Settings > Advanced Secure Boot Options > Platform
Key (PK) Options > Enroll PK and press Enter.

2. Select Enroll PK Using File and press Enter.

Configuring Server Security 83

3. Enter the name of a file on an attached media device. Supported formats include .der, .cer, and .crt.

4. (Optional) To apply a signature GUID to this key:

a. Select Signature GUID (optional) and press Enter.

b. Enter an ID and press Enter. Use the following GUID format (36 characters):

11111111-2222-3333-4444-1234567890ab.

• For Hewlett Packard Enterprise certificates, enter F5A96B31-DBA0-4faa-

A42A-7A0C9832768E

• For Microsoft certificates, enter 77fa9abd-0359-4d32-bd60-28f4e78f784b

• For SUSE certificates, enter 2879c886-57ee-45cc-b126-f92f24f906b9

5. Select Commit changes and exit.

Delete Platform Key (PK)

Use this option to delete a PK certificate.

NOTE:

Deleting the Platform Key forces Secure Boot to be disabled until you enroll a new PK.

Deleting a PK certificate

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Server Security > Secure Boot Settings > Advanced Secure Boot Options > Platform
Key (PK) Options > Delete Platform Key (PK) and press Enter.

2. Select a key from the list and press Enter.

3. Press Enter to delete the key.

Key Exchange Key (KEK) Options

• Enroll KEK Entry

• Delete KEK Entry

Enroll KEK Entry

Use this option to enroll a Key Exchange Key certificate. The Key Exchange Key protects the signature
database from unauthorized modifications. No changes can be made to the signature database without
the private portion of this key.

84 Configuring Server Security

Enrolling a KEK certificate

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Server Security > Secure Boot Settings > Advanced Secure Boot Options > Key
Exchange Key (KEK) Options > Enroll KEK Entry and press Enter.

2. Select Enroll KEK using File and press Enter.

3. Enter the name of a file on an attached media device. Supported formats include .der, .cer, and .crt.

4. (Optional) To apply a signature GUID to this key:

a. Select Signature GUID (optional) and press Enter.

b. Enter an ID and press Enter. Use the following GUID format (36 characters):

11111111-2222-3333-4444-1234567890ab.

• For Hewlett Packard Enterprise certificates, enter F5A96B31-DBA0-4faa-

A42A-7A0C9832768E

• For Microsoft certificates, enter 77fa9abd-0359-4d32-bd60-28f4e78f784b

• For SUSE certificates, enter 2879c886-57ee-45cc-b126-f92f24f906b9

5. Select Commit changes and exit.

Delete KEK Entry

Use this option to delete a Key Exchange Key.

Deleting a KEK entry

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Server Security > Secure Boot Settings > Advanced Secure Boot Options > Platform
Key (PK) Options > Delete KEK Entry and press Enter.

2. Select a key from the list and press Enter.

3. Press Enter to delete the key.

Allowed Signatures Database (DB) Options

The Allowed Signatures Database maintains signatures of codes that are authorized to run on the
platform. This menu displays the following options:

• Enroll Signature (Allowed DB)

• Delete Signature (Allowed DB)

Configuring Server Security 85

Enroll Signature (Allowed DB)

Use this option to enroll a signature in the Allowed Signatures Database. This database maintains
signatures of codes that are authorized to run on the platform.

Enrolling a signature in the Allowed Signatures Database

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Server Security > Secure Boot Settings > Advanced Secure Boot Options > Allowed
Signatures Database (DB) Options > Enroll Signature and press Enter.

2. Select Enroll Signature Using File and press Enter.

3. Enter the name of a file on an attached media device. Supported formats include .der, .cer, and .crt.

4. (Optional) To apply a signature GUID to this signature:

a. Select Signature GUID (optional) and press Enter.

b. Enter an ID and press Enter. Use the following GUID format (36 characters):

11111111-2222-3333-4444-1234567890ab.

• For Hewlett Packard Enterprise certificates, enter F5A96B31-DBA0-4faa-

A42A-7A0C9832768E

• For Microsoft certificates, enter 77fa9abd-0359-4d32-bd60-28f4e78f784b

• For SUSE certificates, enter 2879c886-57ee-45cc-b126-f92f24f906b9

5. Select Commit changes and exit.

Delete Signature (Allowed DB)

Use this option to delete a signature from the Allowed Signatures Database.

Deleting a signature from the Allowed Signatures Database

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Server Security > Secure Boot Settings > Advanced Secure Boot Options > Allowed
Signatures Database (DB) Options > Delete Signature and press Enter.

2. Select a signature from the list and press Enter.

3. Press Enter to delete the signature.

Forbidden Signatures Database (DBX) Options

• Enroll Signature (Forbidden DB)

• Delete Signature (Forbidden DB)

86 Configuring Server Security

Enroll Signature (Forbidden DB)

Use this option to enroll a signature in the Forbidden Signatures Database. The Forbidden Signatures
Database maintains signatures of codes that are not authorized to run on the platform.

Enrolling a signature in the Forbidden Signatures Database

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Server Security > Secure Boot Settings > Advanced Secure Boot Options > Forbidden
Signatures Database (DBX) Options > Enroll Signature and press Enter.

2. Select Enroll Signature Using File and press Enter.

3. Enter the name of a file on an attached media device. Supported formats include .der, .cer, and .crt.

4. (Optional) To apply a signature GUID to this signature:

a. Select Signature GUID (optional) and press Enter.

b. Enter an ID and press Enter. Use the following GUID format (36 characters):

11111111-2222-3333-4444-1234567890ab.

• For Hewlett Packard Enterprise certificates, enter F5A96B31-DBA0-4faa-

A42A-7A0C9832768E

• For Microsoft certificates, enter 77fa9abd-0359-4d32-bd60-28f4e78f784b

• For SUSE certificates, enter 2879c886-57ee-45cc-b126-f92f24f906b9

5. Select Commit changes and exit.

Delete Signature (Forbidden DB)

Use this option to delete a signature from the Forbidden Signatures Database.

Deleting a signature from the Forbidden Signatures Database

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Server Security > Secure Boot Settings > Advanced Secure Boot Options > Forbidden
Signatures Database (DBX) Options > Delete Signature and press Enter.

2. Select a signature from the list and press Enter.

3. Press Enter to delete the signature.

Delete all keys (PK, KEK, DB, DBX)

Use this option to delete all keys in the system, including the Platform Key.

NOTE: Changing the default security certificates can cause the system to fail booting from some devices,
or to fail launching certain software.

Configuring Server Security 87

Deleting all keys

The Delete all keys option deletes all keys in the system, including the Platform Key.

IMPORTANT: After you delete all keys, the system is forced to immediately disable Secure Boot.

Secure Boot remains disabled upon system reboot until valid secure boot keys are restored.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Server Security > Secure Boot Settings > Advanced Secure Boot Options > Delete all
keys.

2. Press Enter to delete all keys.

3. Confirm the deletion.

Reset all keys to platform defaults

Use this option to reset all keys to platform defaults.

Resetting all Secure Boot certificate keys to platform defaults

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Server Security > Secure Boot Settings > Advanced Secure Boot Options > Reset all
keys to platform defaults.

2. Click Yes.

Trusted Platform Module options

Use this menu to access Trusted Platform Module (TPM) options for servers configured with a TPM. TPM
enables the firmware and operating system to take measurements of all phases of the boot process. For
information on installing and enabling the TPM module option, see the user documentation for your server
model.

CAUTION: A TPM locks all data access if you do not follow proper procedures for modifying the
server or server components, including updating system or option firmware, replacing hardware
such as the system board and hard drive, and modifying TPM OS settings.

Enabling the Trusted Platform Module

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Server Security > Trusted Platform Module options and press Enter.

2. Select an option and press Enter, then select a setting for that option and press Enter again.

a. For TPM 2.0 Operation, select Enabled to enable TPM functionality.

b. For TPM 2.0 Visibility, select Visible to make TPM visible to the operating system.

c. Leave the following settings at their default values.

88 Configuring Server Security

• TPM Binding—Sets whether data is encrypted using a TPM bind key, a unique RSA key.
Default is Disabled.

• TPM UEFI Option ROM Measurement—Enables or disables (skips) measuring UEFI PCI
operation ROMs. Default is Enabled.

3. Verify that your new Current TPM Type and Current TPM State settings appear at the top of the

screen.

4. Press F10.

5. Save your changes and reboot the server blade.

TPM is enabled and you can now enable TPM functionality in the OS, such as Microsoft Windows
BitLocker or measured boot.

Configuring Server Security 89

Configuring PCIe devices

PCI Device Enable/Disable

Use this option to enable or disable embedded and added-in PCI devices. Disabling devices reallocates
the resources (memory, I/O, and ROM space and power) that are normally allocated to the device. By
default, all devices are enabled.

Configuring specific PCIe devices

Use the PCIe Device Configuration options to enable or disable, and select configuration settings for
embedded and added-in PCI devices. Disabling devices reallocates the resources (memory, I/O, and
ROM space and power) that are normally allocated to the device. By default, all devices are enabled.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > PCIe Device Configuration.

2. Select a device from the list.

3. Select settings. Depending on the device, options include:

• Device Disable

◦ Auto—The device is automatically enabled at server boot.

◦ Disabled—The device is not automatically enabled.

• PCIe Link Speed

◦ Auto—Sets the link speed to the maximum supported speed of the PCIe link.

◦ PCIe Generation 1.0—Sets the link speed to a maximum speed of PCIe Generation 1.0.

◦ PCIe Generation 2.0—Sets the link speed to a maximum speed of PCIe Generation 2.0.

NOTE: If this feature is not supported, the option is not available.

• PCIe Power Management (ASPM)

◦ Auto

◦ Disabled

◦ L1 Enabled—The device's link enters a lower power standby state at the expense of a longer

exit latency.

• PCIe Option ROM

◦ Enabled—The platform optimally loads PCIe Option ROMs to save boot time.

◦ Disabled—The platform disables all PCIe Option ROM optimizations, which might be required

for older PCIe devices.

4. Save your settings.

90 Configuring PCIe devices

Configuring Server Availability

Server Availability options

• ASR Status

• ASR Timeout

• Wake-On LAN

• POST F1 Prompt

• Power Button Mode

• Automatic Power-On

• Power-On Delay

ASR Status

Use the option to enable or disable ASR (Automatic Server Recovery). When enabled, the system
automatically reboots if the server locks up.

Enabling or disabling ASR

Prerequisites

The System Management driver is loaded.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Server Availability > ASR Status and press Enter.

2. Select a setting and press Enter.

a. Enabled

b. Disabled

3. Press F10.

ASR Timeout

When ASR Status is enabled, use this option to set the time to wait before rebooting the server if an
operating system crash or server lockup occurs. When the server has not responded in the selected
amount of time, the server automatically reboots.

Setting the ASR timeout

Prerequisites

ASR Status is enabled.

Configuring Server Availability 91

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Server Availability > ASR Timeout and press Enter.

2. Select a setting and press Enter.

a. 5 Minutes

b. 10 Minutes

c. 15 Minutes

d. 20 Minutes

e. 30 Minutes

3. Press F10.

Wake-On LAN

Use this option to enable or disable the ability of the server to power on remotely when it receives a
special packet. When enabled, Wake-On LAN powers up the system remotely using a WOL-capable
NIC. This option requires a WOL-capable NIC, NIC driver, and operating system.

NOTE:

If you enable this option, remove all power cords before adding or removing any adapters. Some
adapters can cause the system to power on when added or removed.

Enabling or disabling Wake-On LAN

Prerequisites

A WOL-capable NIC, NIC driver, and operating system

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > Server Availability > Wake-On LAN and press Enter.

2. Select a setting and press Enter.

a. Enabled

b. Disabled

3. Press F10.

POST F1 Prompt

Use this option to configure how the system displays the F1 key in the server POST screen. When
enabled and an error occurs, you can press the F1 key to continue with the server power-up sequence.

A series of system tests execute during POST and:

92 Configuring Server Availability

• If failures occur that allow the system to continue operating, the system continues to boot and then
posts a message.

• If critical components fail or are missing, the server attempts to boot. If it can boot, it posts a message
and, when enabled, an F1 prompt.

• If the system cannot run with the missing or failed components, it halts until those components are
replaced.

Setting the POST F1 prompt delay

Use the POST F1 Prompt option to configure how the system displays the F1 key in the server POST
screen. When enabled and an error occurs, you can press the F1 key to continue with the server power­up sequence.

A series of system tests execute during POST and:

• If failures occur that allow the system to continue operating, the system continues to boot and then
posts a message.

• If critical components fail or are missing, the server attempts to boot. If it can boot, it posts a message
and, when enabled, an F1 prompt.

• If the system cannot run with the missing or failed components, it halts until those components are
replaced.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > System Options > Server Availability > POST F1 Prompt.

2. Select a setting.

• Delayed 20 seconds—If an error occurs, the system pauses for 20 seconds at the F1 prompt, and

then continues to boot the OS.

• Delayed 2 seconds—If an error occurs, the system pauses for two seconds at the F1 prompt, and

then continues to boot the OS.

• Disabled—If an error occurs, the system bypasses the F1 prompt and continues to boot.

3. Save your setting.

Power Button Mode

Use this option to enable or disable momentary power button functionality. Power Button Mode does not
affect the four-second power button override or the remote power control functionality.

Enabling or disabling momentary power button functionality

Use the Power Button Mode option to enable or disable momentary power button functionality. This
mode does not affect the four-second power button override, or the remote power control functionality.

Configuring Server Availability 93

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > System Options > Server Availability > Power Button Mode.

2. Select a setting.

• Enabled

• Disabled

3. Save your setting.

Automatic Power-On

Use this option to configure how the server automatically powers on when AC power is applied to the
system. By default, the system returns to its previous power state when AC power is restored after an AC
power loss. The Always Power On option sets the system to always return to the “on” state, even if it
was in the “off” state when power was lost.

Setting the automatic power-on state

Use the Automatic Power-On option to configure how the server automatically powers on when AC
power is applied. By default, the system returns to its previous power state when AC power is restored
after an AC power loss.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > System Options > Server Availability > Automatic Power-On.

2. Select a setting.

• Always Power On—The system automatically returns to a power on state, even if it was in the “off”

state when power was lost.

• Always Power Off—The system automatically returns to a power off state.

• Restore Last Power State—The system automatically returns to its previous power off state.

3. Save your setting.

Power-On Delay

Use this option to set whether to delay the server from turning on for a specified time. This option enables
staggering when servers power up after a power loss, which can prevent power usage spikes.

94 Configuring Server Availability

NOTE:

These events override the Power-On Delay setting and immediately power on the server:

• Pressing the power button using the iLO Virtual Power Button

• Wake-ON LAN

events

• RTC (Real-Time Clock) wake-up events

Setting the power-on delay

Use the Power-On Delay option to set whether to delay the server from turning on for a specified time.
This option enables staggering when the server powers up after a power loss, which can prevent power
usage spikes.

NOTE: These events override the Power-On Delay setting and immediately power on the server:

• Pressing the power button using the iLO Virtual Power Button

• Wake-ON LAN events

• RTC (Real-Time Clock) wake-up events

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > System Options > Server Availability > Power-On Delay.

2. Select a setting.

• No Delay

• Random Delay

• 15 Second Delay

• 30 Second Delay

• 45 Second Delay

• 60 Second Delay

3. Save your setting.

Configuring Server Availability 95

Configuring BIOS serial console and EMS options

BIOS Serial Console and EMS options

BIOS serial console and EMS console redirection enable you to view POST error messages and run
RBSU remotely through a serial connection to the server COM port or iLO Virtual Serial port. To do so,
you do not need a keyboard or mouse. This menu includes:

• BIOS Serial Console Emulation Mode

• EMS Console

NOTE: Some languages or characters might require that you use a specific emulation mode.

BIOS Serial Console Emulation Mode

Use this option to select a serial console emulation mode type. Your selection depends on the emulation
you want to use in your serial terminal program (for example, Hyper Terminal or PuTTY). The BIOS
emulation mode must match the selected mode in the terminal program. When you select ANSI mode,
some special characters are displayed in the serial console (for example, a degree symbol °).

Setting the BIOS Serial Console Emulation Mode

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > BIOS Serial Console and EMS > BIOS Serial Console Emulation Mode and press Enter.

2. Select a setting and press Enter.

a. VT100

b. ANSI

c. VT100+

3. Press F10.

EMS Console

Use this option to configure the ACPI serial port settings for redirecting the Windows Server Emergency
Management (EMS) console.

When setting this option for redirecting EMS through a network connection, do the following:

If you are using iLO 4, select the value (COM1 or COM2) that corresponds to the resources assigned to
the Virtual Serial Port in the System Options > Serial Port Options menu.

EMS Console in Windows Server 2008 and 2012

EMS provides input and output support for all Microsoft Windows kernel components, including the
loader, setup, recovery console, OS kernel, blue screens, and the Special Administration Console. The

96 Configuring BIOS serial console and EMS options

Special Administration Console is a text mode management console that is available after Windows
Server 2008 or 2012 OS is initialized.

Microsoft enables EMS in the OS, and you must also enable EMS in the ROM. When enabled, EMS
assumes the serial port for redirection and can cause interference with other devices attached to the
serial port. To avoid interference, EMS is disabled in the system ROM by default on ProLiant ML and DL
servers. If EMS is disabled in Windows Server 2008 or 2012, configure the EMS console on a COM
port, and reboot the server to update the boot.ini file.

Configuring the EMS console

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > BIOS Serial Console and EMS > EMS Console and press Enter.

2. Select a setting and press Enter.

a. Disabled

b. COM1—Enables the EMS console on the COM1 port.

c. COM2—Enables the EMS console on the COM2 port.

3. Press F10.

Configuring BIOS serial console and EMS options 97

Configuring Server Asset Information

Server Asset Information options

• Server Information

• Administrator Information

• Service Contact Information

• Custom POST Message

Server Information

Use this option to enter reference information for the server administrator. For text settings, enter a
maximum of 14 characters. By default, all values are blank.

Entering server information

Use the Server Information option to enter reference information for the server administrator. For text
settings, enter a maximum of 14 characters. By default, all values are blank.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > System Options > Server Asset Information > Server Information.

2. Select and complete entries.

• Server Name—Enter a server name.

• Server Asset Tag—Enter a server asset number.

• Asset Tag Protection—Select a setting:

◦ Unlocked

◦ Locked—Locks asset tag information. The asset tag is not erased if you restore default system

settings.

• Server Primary OS—Enter a description of the primary OS of the server.

• Server Other Information—Enter additional text describing the server.

3. Save your settings.

Administrator Information

Use this option to enter contact information for the server administrator. The number of characters
allowed for each entry varies by server model. By default, all values are blank.

Entering administrator information

Use the Administrator Information option to enter contact information for the server administrator. The
number of characters allowed for each entry varies by server model. By default, all values are blank.

98 Configuring Server Asset Information

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > System Options > Server Asset Information > Administrator Information.

2. Select and complete entries.

• Administrator Name—Enter the server administrator’s name.

• Administrator Phone Number—Enter the server administrator’s phone number.

• Administrator E-mail Address—Enter the server administrator’s e-mail address.

• Administrator Other Information—Enter additional text relating to the server administrator.

3. Save your settings.

Service Contact Information

Use this option to enter service contact information for the server administrator. The number of characters
allowed for each entry varies by server model. By default, all values are blank.

Entering service contact information

Use the Service Contact Information option to enter service contact information for the server
administrator. The number of characters allowed for each entry varies by server model. By default, all
values are blank.

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > System Options > Server Asset Information > Service Contact Information.

2. Select and complete entries.

• Service Contact Name—Enter the service contact’s name.

• Service Phone Number—Enter the service contact’s phone number.

• Service Contact E-mail Address—Enter the service contact’s e-mail address.

• Service Contact Other Information—Enter additional text relating to the service contact.

3. Save your settings.

Custom POST Message

Use this option to enter a custom message of up to 60 characters to display on the POST screen.

Entering a custom POST message

Use the Custom POST Message option to display a custom message on the server POST screen.

Configuring Server Asset Information 99

Procedure

1. From the System Utilities screen, select System Configuration > BIOS/Platform Configuration
(RBSU) > System Options > Server Asset Information > Custom POST Message.

2. Enter a message of up to 62 characters.

3. Save your setting.

100 Configuring Server Asset Information