Configuring the Server

The Kunpeng SCCM must run on a server that supports the TrustZone feature. For details about the hardware environments, see TrustZone Kit Feature Guide.

The TEE is incompatible with some features and is disabled by default. To enable the TEE, perform the following operations in the BIOS:

1. Restart the server to access the BIOS screen. For details, see "Accessing the BIOS" in TaiShan Server BIOS Parameter Reference (Kunpeng 920 Processor).
2. Disable three-channel interleaving.
   1. On the BIOS screen, choose Advanced > Memory Config and press Enter. The Memory Configuration screen is displayed.
   2. On the Memory Configuration screen, set Channel Interleaving 3Way to Disabled.

      

3. Disable SMT2.
   1. On the BIOS screen, choose Advanced > Power And Performance Configuration > CPU PM Control and press Enter. The CPU PM Control screen is displayed.
   2. On the CPU PM Control screen, set SMT2 to Disabled.

      

4. Enable the TEE.
   1. On the BIOS screen, choose Security > TEE Configuration. The TEE Configuration screen is displayed.
   2. On the TEE Configuration screen, set Support TEE to Enabled.