Updating the TPM Firmware

Starting with version 26.03.1, the Trusted Platform Module (TPM) firmware is available as a separate component package. Complete the following steps to update the TPM firmware on a DGX B300 system.

1. Download and extract the firmware archive.

2. Verify the TPM package version.

   nvfwupd -t ip=<bmc-ip-address> user=<bmc-username> password=<bmc-password> \
     show_version -p <component-package.fwpkg>
   

   Confirm that the TPM row shows the installed version and the target package version (for example, 15.24).

3. Create a TPM update JSON parameter file.

   echo '{}' > tpm_update.json
   

4. Enable TPM support.

   TPM support is disabled by default. To verify the current state, run the following command:

   curl -k -u <bmc-username>:<bmc-password> -H "Content-Type: application/json" \
     -X GET -s https://<bmc-ip-address>/redfish/v1/Systems/DGX/Bios | jq .Attributes.TpmSupport
   

   Example output:

   "Disabled"
   

   Use one of the following methods to enable TPM support:

   • Redfish API

     curl -k -u <bmc-username>:<bmc-password> -H "Content-Type: application/json" \
       -X PATCH https://<bmc-ip-address>/redfish/v1/Systems/DGX/Bios/SD --header 'If-Match: *' -d '{"Attributes":{"TpmSupport":"Enabled"}}' | jq
     

   • SBIOS Setup

     1. Reboot the DGX B300 system.

     2. When the SBIOS version screen appears, press Del or F2 to enter the BIOS Setup Utility.

     3. Navigate to Security Device Support and set the value to Enabled.

5. Run the TPM firmware update.

   nvfwupd -t ip=<bmc-ip-address> user=<bmc-username> password=<bmc-password> update_fw \
     -p <component-package.fwpkg> -y -s tpm_update.json
   

Checking TPM Information

Use one of the following methods to verify the installed TPM information on the DGX B300.

Using the CLI

This method queries the TPM directly from the DGX B300 host operating system.

1. Open a terminal console.

2. Run the dmidecode command with the --type 43 option to retrieve the TPM device information:

   sudo dmidecode --type 43
   

   Note

   This command requires root privileges (sudo) to access TPM information from the system’s Desktop Management Interface (DMI) table.

3. Locate the Firmware Revision line in the output to determine the TPM firmware version.

Using the SBIOS Setup

This method displays TPM information within the SBIOS Setup Utility.

1. Access the system console.

   Refer to Connecting to DGX B300.

2. Enter the SBIOS Setup Utility.

   1. Reboot the DGX B300 system.

   2. When the SBIOS splash screen appears, press Del or F2 to enter the setup utility.

3. Navigate to the TPM settings.

   From the main screen, select Advanced > Trusted Computing, and then press Enter.