Skip to main content

Install the firmware and RoT security module

Follow instructions in this section to install the ThinkSystem V3 Firmware and Root of Trust Security Module (firmware and RoT security module).

About this task

Important

This task must be operated by trained technicians that are certified by Lenovo Service. Do not attempt to remove or install the part without proper training and qualification.

(Lenovo trained technician only) After replacing the Firmware and RoT Security Module, update the UEFI firmware to the specific version supported by the server. For detailed information on how to update the firmware, see Tip for replacing a Firmware and RoT Security Module (Lenovo service technicians only).

Attention

  • Read Installation Guidelines and Safety inspection checklist to ensure that you work safely.

  • Power off the server and peripheral devices and disconnect the power cords and all external cables. See Power off the server.

  • Touch the static-protective package that contains the component to any unpainted metal surface on the server; then, remove it from the package and place it on a static-protective surface.

  • If the server is installed in a rack, remove the server from the rack.

  • After replacing the Firmware and RoT Security Module, update the firmware to the specific version supported by the server. Make sure that you have the required firmware or a copy of the pre-existing firmware before you proceed.

Firmware and driver download: You might need to update the firmware or driver after replacing a component.

Procedure

  1. Remove the PCIe riser assembly. See Remove the PCIe riser assembly.
  2. Touch the static-protective package that contains the component to any unpainted metal surface on the server; then, remove it from the package and place it on a static-protective surface.
  3. Install the Firmware and RoT Security Module.
    Figure 1. Firmware and RoT Security Module installation
    Firmware and RoT Security Module installation
    1. Lower the Firmware and RoT Security Module onto the system board and ensure that the connector on the module is correctly inserted into the slot on the system board.
    2. Tighten the two screws to secure the Firmware and RoT Security Module in place.

After you finish

  1. Install the PCIe riser assembly. See Install the PCIe riser assembly.

  2. Install the top cover. See Install the top cover.

  3. Complete the parts replacement. See Complete the parts replacement.

  4. Update the UEFI, XCC and LXPM firmware to the specific version supported by the server. See Tip for replacing a Firmware and RoT Security Module (Lenovo service technicians only).

  5. Perform OneCLI commands to restore the UEFI settings. See OneCLI commands that restore configuration settings.

  6. Perform both OneCLI commands and XCC actions to restore the XCC settings. See OneCLI commands that restore configuration settings and Using XCC to restore the BMC configuration.

  7. If there is a software (SW) key, for example, XCC FoD key, installed in the system, inject the key again to ensure that the key functions properly. See Using Lenovo Features on Demand.
    Note
    If you need to replace the system board together with the Firmware and RoT Security Module, update the VPD before injecting the key. See Update the Vital Product Data (VPD).
  8. Optionally, do the following if needed:

Demo video

Watch the procedure on YouTube