Skip to main content

Install the firmware and RoT security module

Follow instructions in this section to install the ThinkSystem V3 Firmware and Root of Trust Security Module (firmware and RoT security module). The procedure must be executed by a trained technician.

About this task

Important
This task must be operated by trained technicians that are certified by Lenovo Service. Do no attempt to remove or install the part without proper training and qualification.
Attention
  • Read Installation Guidelines and Safety inspection checklist to ensure that you work safely.
  • Power off the server and peripheral devices and disconnect the power cords and all external cables. See Power off the server.
  • Prevent exposure to static electricity, which might lead to system halt and loss of data, by keeping static-sensitive components in their static-protective packages until installation, and handling these devices with an electrostatic-discharge wrist strap or other grounding system.
Firmware and driver download: You might need to update the firmware or driver after replacing a component.

Procedure

  1. Touch the static-protective package that contains the component to any unpainted metal surface on the server; then, remove it from the package and place it on a static-protective surface.
  2. Install the firmware and RoT security module.
    1. Lower the firmware and RoT security module onto the system board and ensure that the connector on the module is correctly inserted into the slot on the system board.
    2. Tighten the two screws to secure the firmware and RoT security module in place.
    Figure 1. Firmware and RoT security module installation
    Firmware and RoT security module installation

After you finish

  1. If applicable, install the drive cage (bay 3). See Install the drive cage (bay 3).

  2. If applicable, install the M.2 boot adapter. See Install the M.2 boot adapter

  3. Install the PCIe adapter. See Install a PCIe adapter.

  4. Reconnect all the cables that were removed. See Internal cable routing.

  5. Install the server cover. See Install the server cover.

  6. Complete the parts replacement. See Complete the parts replacement.

  7. Update the UEFI, XCC and LXPM firmware to the specific version supported by the server. See Tip for replacing a Firmware and RoT Security Module.
  8. Perform OneCLI commands to restore the UEFI settings. See OneCLI commands that restore configuration settings.
  9. Perform both OneCLI commands and XCC actions to restore the XCC settings. See OneCLI commands that restore configuration settings and Using XCC to restore the BMC configuration.
  10. Optionally, do the following if needed:

Demo video

Watch the procedure on YouTube

  • Hide/observe TPM
    TPM is enabled by default to encrypt data transfer for system operation. Optionally, you can disable TPM using Unified Extensible Firmware Interface (UEFI) or Lenovo XClarity Essentials OneCLI.
  • Update the TPM firmware
    Optionally, you can update the TPM firmware using Lenovo XClarity Essentials OneCLI.
  • Enable UEFI Secure Boot
    Optionally, you can enable UEFI Secure Boot.