Rate This Document
Findability
Accuracy
Completeness
Readability

Routine Maintenance

You can use the Computing Toolkit to manage servers running the Confidential Computing TEE Kit. It streamlines operations such as log collection, TEE parameter configuration, license file import, and firmware upgrades.

1 describes how to obtain the Computing Toolkit. For details about how to use the Computing Toolkit, see the Computing Toolkit 25.0.0 User Guide.

Table 1 Computing Toolkit software package

Software Package

Software Version

Description

How to Obtain

Computing Toolkit

25.1.RC1_win64

Manages servers that run the Confidential Computing TEE Kit.

Installing the Computing Toolkit

After obtaining the required software package, install it by following the "Installing the Computing Toolkit" section in the Computing Toolkit 25.0.0 User Guide.

Collecting Logs

Perform the following steps to collect TEE logs on servers:

  1. Enable the log collection module of the Computing Toolkit.

  2. Click Device Management, select OS, and add the servers whose information you want to collect.

  3. Click Add by Network Segment, enter the start IP address and user name of the target server OS, and click Automatic Discovery.

  4. Click Log Collection. Select OS for the device type, select the servers whose logs you want to collect, and click Next.

  5. Select TrustZone for Quick Search, select the TrustZone log module, and click Next.

    After you click Next, the tool automatically starts to collect logs. Wait until the log collection is complete.

Setting TEE Parameters

Perform the following steps to set the TEE configuration items in the server BIOS:

  1. Click the One-Click Deployment function module of the Computing Toolkit.

  2. Set Manual configuration, BIOS configuration, and Restart Server After Configuration. Click Next.

  3. Select the servers whose TEE parameters need to be modified and then click Get Device Info.

  4. Select a reference device and click Obtain. After the BIOS configuration is obtained, click Next.

    During batch device configuration, ensure that the selected configuration items have the same device version.
    • If you select BMC Configuration, ensure that the BMC versions of the selected devices are the same.
    • If you select BIOS Configuration, ensure that the BIOS versions of the selected devices are the same.
    • If you select OS Configuration, ensure that the SP versions of the selected devices are the same.
  5. Choose Security > TEE Configuration and modify TEE parameters as required.

  6. Click Next to power on and off the server and make the TEE configuration take effect as prompted.

Importing a TEE License File

Perform the following steps to import a TEE license file to the server BMC.

  1. Click the One-Click Deployment function module of the Computing Toolkit.

  2. Select BMC Configuration and click Next.

  3. Select the servers whose TEE parameters need to be modified and then click Get Device Info.

    If the target servers cannot be selected, add the BMC devices on the Device Management page.

  4. Select a reference device and click Obtain. After the BMC configuration is obtained, click Next.

  5. Select iBMC License, Import License, and Add File to upload the TEE license file. Then click Save.

    Upload the license file in .zip format.

  6. Click Next.

  7. Click Execute Deployment to import the license file.

  8. Log in to the iBMC WebUI of the target server and choose iBMC Settings > License Management to check the imported license file.

Upgrading the Firmware

Perform the following steps to upgrade the server TMM firmware:

  1. Click the Firmware Upgrade function module of the Computing Toolkit.

  2. Select the servers whose firmware needs to be upgraded, and click Next.

  3. In the Set Upgrade Policy phase, click Import Firmware Package.

  4. Click Add File and select the TMM firmware upgrade package and the signature file.

    The TMM, TEE OS, and BIOS firmware cannot be upgraded simultaneously. If multiple components require upgrading, perform the upgrades one at a time.

  5. Click Next and select a packet transfer mode.

  6. Select an activation mode and click Next.

  7. Click Start Evaluation to complete the device firmware upgrade evaluation.

  8. Click Next to proceed to the Perform Upgrade phase. Click Perform Upgrade to complete the server firmware upgrade.