Users Guide
注: 确保清除 BIOS 中的 TPM 选项,然后再执行以下步骤来启用 TPM。
1 通过枚举 DCIM_BIOSService 类获取选择器设置。运行:
wsman invoke –a “SetBIOSAttributes” http://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/
DCIM_BIOSService
?Name=”DCIM:BIOSService”, SystemCreationClassName=”DCIM_ComputerSystem”,
SystemName=”<system name from DCIM_BIOSService class>”, CreationClassName=”DCIM_BIOSService” –
N root/dcim/sysman –h <system IP/name> –P 5985 –u <user name> –p <password> –y basic –v –V –
k “AttributeName=AdminPwd” –k “AttributeValue=<password>”
2 如果尚未在系统上设置 BIOS 密码,请使用以下命令设置该密码:
wsman invoke –a “SetBIOSAttributes” http://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/
DCIM_BIOSService
?Name=”DCIM:BIOSService”, SystemCreationClassName=”DCIM_ComputerSystem”,
SystemName=”<system name from DCIM_BIOSService class>”, CreationClassName=”DCIM_BIOSService” –
N root/dcim/sysman –h <system IP or system name> –P 5985 –u <user name> –p <password> –y
basic –v –V –k “AttributeName=Trusted Platform Module” –k “AttributeValue=1” –k
“AuthorizationToken=<password>”
3 使用以下命令启用 TPM 安全保护:
wsman invoke –a “SetBIOSAttributes” http://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/
DCIM_BIOSService
?Name=”DCIM:BIOSService”, SystemCreationClassName=”DCIM_ComputerSystem”,
SystemName=”<system name from DCIM_BIOSService class>”, CreationClassName=”DCIM_BIOSService” –
N root/dcim/sysman –h <system IP or system name> –P 5985 –u <user name> –p <password> –y
basic –v –V –k “AttributeName=Trusted Platform Module Activation” –k “AttributeValue=2” –k
“AuthorizationToken=<password>”
4 重新启动系统。
5 使用以下命令激活 TPM:
wsman invoke –a “SetBIOSAttributes” http://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/
DCIM_BIOSService?Name=”DCIM:BIOSService”, SystemCreationClassName=”DCIM_ComputerSystem”,
SystemName=”<system name from DCIM_BIOSService class>”, CreationClassName=”DCIM_BIOSService” –
N root/dcim/sysman –h <system IP/name> –P 5985 –u <user name> –p <password> –y basic –v –V –
k “AttributeName=AdminPwd” –k “AttributeValue=” –k “AuthorizationToken=<password>”
更改引导顺序
要更改引导顺序,请执行以下步骤:
:
1 使用以下命令检查引导顺序类型(传统或 UEFI):
• WMIC 命令:wmic /namespace:\\root\dcim\sysman path dcim_BootConfigSetting get ElementName/
format:list。
• PowerShell 命令:gwmi -namespace root\dcim\sysman -class dcim_BootConfigSetting -Property
ElementName。
2 使用以下命令检查当前引导顺序类型(传统或 UEFI):
• WMIC 命令:wmic /namespace:\\root\dcim\sysman path dcim_ElementSettingData.IsCurrent=1 get
SettingData /format:list 。
• PowerShell 命令:gwmi -namespace root\dcim\sysman -class dcim_elementSettingData -Filter
"IsCurrent=1" -Property SettingData。
3 使用以下命令更改引导顺序:
• WMIC 命令:wmic /namespace:\\root\dcim\sysman path dcim_bootconfigsetting call
ChangeBootOrder /
?:full 。
• PowerShell 命令:(gwmi -namespace root\dcim\sysman -class
dcim_bootconfigsetting).getmethodparameters("ChangeBootOrder") 。
注: dcim_BootConfigSetting 实例必须代表您要更改的引导配置 – 类型 1(传统)或类型 2 (UEFEI)。
• 参数:
使用 Dell Command | Monitor
21