Install the firmware and RoT security module
Follow instructions in this section to install the ThinkSystem V3 Firmware and Root of Trust Security Module (firmware and RoT security module). The procedure must be executed by a trained technician.
About this task
Important
- This task must be operated by trained technicians that are certified by Lenovo Service. Do not attempt to remove or install it without proper training and qualification.
- (Lenovo trained technicians only) After replacing the Firmware and RoT Security Module, update the UEFI, XCC and LXPM firmware to the specific version supported by the server. For detailed information on how to update the firmware, see Tip for replacing a Firmware and RoT Security Module.
Attention
- Read Installation Guidelines and Safety inspection checklist to ensure that you work safely.
- Power off the server and peripheral devices and disconnect the power cords and all external cables. See Power off the server.
- Prevent exposure to static electricity, which might lead to system halt and loss of data, by keeping static-sensitive components in their static-protective packages until installation, and handling these devices with an electrostatic-discharge wrist strap or other grounding system.
Firmware and driver download: You might need to update the firmware or driver after replacing a component.
Go to Drivers and Software download website for ThinkSystem SR685a V3 to see the latest firmware and driver updates for your server.
Go to Update the firmware for more information on firmware updating tools.
Procedure
After you finish
- If applicable, reinstall the PCIe riser assembly 2. See Install a PCIe riser assembly.
- Reinstall the 2U compute shuttle. See Install the 2U compute shuttle.
- Complete the parts replacement. See Complete the parts replacement.
- (Lenovo service technicians only) Update the UEFI, XCC and LXPM firmware to the specific version supported by the server. See Tip for replacing a Firmware and RoT Security Module.
- Perform OneCLI commands to restore the UEFI settings. See OneCLI commands that restore configuration settings.
- Perform both OneCLI commands and XCC actions to restore the XCC settings. See OneCLI commands that restore configuration settings and Using XCC to restore the BMC configuration.
- If there is a software (SW) key, for example, XCC FoD key, installed in the system, inject the key again to ensure that the key functions properly. See Using Lenovo Features on Demand.NoteIf you need to replace the processor board together with the
firmware and RoT security module, update the VPD before injecting the key. See Update the Vital Product Data (VPD). - Optionally, do the following if needed:
- Hide TPM. See Hide/observe TPM.
- Update the TPM firmware. See Update the TPM firmware.
- Enable UEFI Secure Boot. See Enable UEFI Secure Boot.
Give documentation feedback