Enabling the TEE in the BIOS

If the TEE license file has been imported, you can enable or disable the TEE and configure the TEE secure memory size using BIOS configuration options.

1. Restart or power on the server and log in to the BIOS.
2. On the BIOS setup screen, choose Advanced > Memory Configuration.

   

3. Set Channel Interleaving 3Way to Disabled.

   

4. On the BIOS setup screen, choose Security > TEE Configuration.

   

5. Set Support TEE to Enabled.

   

6. Set the TEE secure memory size based on your service requirement.

   

   

   • Max Volume of Secure Memory indicates the maximum secure memory size allowed when the memory space is evenly allocated from NUMA nodes.
   • Set the desired secure memory size from the TEE Memory Size drop-down list. In AUTO mode, as much secure memory as possible is allocated while even allocation across NUMA nodes is not considered.
7. Press F10 to save the settings and exit the BIOS.