§ Wiki · Wiki entry

IC-OS UEFI Configuration — Gen-2 ASUS

BIOS and UEFI settings for Gen-2 ASUS node machines — Trusted Computing, AMD CBS, CPU, and PCI subsystem settings required by IC-OS.

·May 4, 2026·4 min read

This runbook configures the BIOS/UEFI on a Gen-2 ASUS server so that IC-OS can install and run correctly. It is the BIOS-side step of the Node Deployment Guide (Gen-2) — at section 9, "UEFI setup and boot menu", branch here, complete the steps below, then return to the deployment guide and continue to step 10.

[!WARNING] Do not enable the RAID BIOS setting. RAID will break IC-OS installation.

1. UEFI — Enter Setup

  1. Reboot or power on the server.
  2. Watch for the screen with the ASUS logo.
  3. Press DEL (delete) a couple of times to enter the setup menu.

2. UEFI — Check version

Check the version number at the bottom of the screen. The UEFI/BIOS version must be 2.21.1280 or higher — this is the version tested to support the features IC-OS requires.

If the version is lower than 2.21.1280, download the latest version from the ASUS support site and follow the included update instructions before continuing.

3. UEFI — Advanced Settings

Switch to the Advanced menu.

Trusted Computing

  1. Select Trusted Computing.
  2. Set Security Device Support to Enabled.
  3. Set SHA256 PCR Bank to Enabled.
  4. Set Platform Hierarchy to Enabled.
  5. Set Storage Hierarchy to Enabled.
  6. Set Endorsement Hierarchy to Enabled.

[!NOTE] The Trusted Computing page may look slightly different depending on firmware revision. Set the values listed above regardless of the exact layout.

  1. Press ESC to return to the Advanced main menu.

AMD CBS

  1. Select AMD CBS and press Enter.

CPU Common Options

  1. Select CPU Common Options and press Enter.
  2. Set SEV ASID Count to 253 ASIDs.
  3. Set SEV-ES ASID Space Limit Control to Manual.
  4. Set SEV-ES ASID Space Limit to 100.
  5. Set SNP Memory (RMP Table) Coverage to Enabled.
  6. Set SMEE to Enabled.
Performance
  1. Select Performance.
  2. Set SMT Control to Enabled.
  3. Press ESC twice to return to the AMD CBS main menu.

DF Common Options

  1. Select DF Common Options and press Enter.
  2. Select Memory Addressing and press Enter.
  3. Set NUMA nodes per socket to NPS0.
  4. Press ESC twice to return to the AMD CBS main menu.

UMC Common Options

  1. Select UMC Common Options and press Enter.
  2. Select DDR4 Common Options and press Enter.
  3. Select Security and press Enter.
  4. Set TSME to Disabled.
  5. Press ESC three times to return to the AMD CBS main menu.

NBIO Common Options

  1. Select NBIO Common Options and press Enter.
  2. Set Enable AER Cap to Enabled.
  3. Set SEV-SNP Support to Enabled.
  4. Press ESC twice to return to the Advanced main menu.

CPU Configuration

  1. Select CPU Configuration and press Enter.
  2. Set SVM Mode to Enabled.
  3. Press ESC to return to the Advanced main menu.

PCI Subsystem Settings

  1. Select PCI Subsystem Settings and press Enter.
  2. Set SR-IOV Support to Enabled.
  3. Press ESC to return to the Advanced main menu.

4. UEFI — Exit

  1. Switch to the Exit menu.
  2. Select Save Changes and Reset, then select Yes at the prompt and press Enter.

The system will now reboot.

[!WARNING] Do not unplug the IC-OS USB stick during this reboot.

5. Boot the IC-OS USB image

  1. Watch for the screen with the ASUS logo. Press DEL (delete) a couple of times to enter the setup menu.
  2. Switch to the Exit menu.
  3. Select the first partition on the USB device and press Enter.

Return to the deployment runbook

Related