Skip to main content

Install the Firmware and RoT Security Module

Follow the instructions in this section to install the ThinkSystem V3 Firmware and Root of Trust Security Module (firmware and RoT security module).

About this task

Important

This task must be operated by trained technicians that are certified by Lenovo Service. Do not attempt to remove or install the part without proper training and qualification.

(Lenovo trained technician only) After replacing the Firmware and RoT security module, update the UEFI firmware to the specific version supported by the server. For detailed information on how to update the firmware, see Tip for replacing a Firmware and RoT Security Module (Lenovo service technicians only).

Attention

  • Read Installation Guidelines and Safety inspection checklist to ensure that you work safely.

  • Power off the server and disconnect all power cords for this task. See Power off the server.

  • Prevent exposure to static electricity, which might lead to system halt and loss of data, by keeping static-sensitive components in their static-protective packages until installation, and handling these devices with an electrostatic-discharge wrist strap or other grounding system.

  • If the server is in a rack, remove it from the rack.

  • If foot stands are installed on the server, pivot them inwards and lay the server on its side for easier operation.

Procedure

  1. Make preparations for this task.
    1. Touch the static-protective package that contains the new part to any unpainted surface on the outside of the server. Then, take the new part out of the package and place it on a static-protective surface.
  2. Place the firmware and RoT security module evenly on the system board; then, align and tighten the two screws with corresponding nuts to secure.
    Figure 1. Installation of the firmware and RoT security module
    Firmware and RoT Security Module installation
  3. Connect cables to the system board. See System board connectors.

After this task is completed

  1. Reinstalled the HL PCIe adapters and FL GPU adapters that were removed for the replacement of the firmware and RoT security module. See Install a HL PCIe adapter and Install a FL GPU adapter.

  2. Reinstalled the A2/L4 GPU air duct that was removed for the replacement of the firmware and RoT security module. See Install an A2/L4 GPU air duct.

  3. Reconnect all the cables that were removed. See Internal cable routing..

  4. Reinstall the air baffle. See Install an air baffle.

  5. Reinstall all the flash power modules, if necessary. See Install a flash power module.

  6. Reinstall the server cover. See Install a server cover.

  7. Complete the parts replacement. See Complete the parts replacement.

  8. Update the UEFI, XCC, and LXPM firmware to the specific version supported by the server. See Tip for replacing a Firmware and RoT Security Module (Lenovo service technicians only).

  9. Perform OneCLI commands to back up the UEFI settings. See OneCLI commands that save configuration settings.

  10. Perform both OneCLI commands and XCC actions to back up the XCC settings. See OneCLI commands that save configuration settings and Using XCC to back up the BMC configuration.

  11. If there is a software (SW) key, for example, XCC FoD key, installed in the system, inject the key again to ensure that the key functions properly. See Using Lenovo Features on Demand.

  12. Optionally, do the following if needed:

Demo video

Watch the procedure on YouTube