topic How to set the TPMOverrideFlag to true in ProLiant Servers (ML,DL,SL)

How to set the TPMOverrideFlag to true

chrisarceo — Thu, 18 Apr 2024 14:21:06 GMT

MessageId: iLO.{version}.FWFlashTPMOverrideFlagRequired A Trusted Module is detected in this system. Failure to perform proper OS encryption procedures will result in loss of access to your data if recovery key is not available. Recommended procedure is to suspend encryption software prior to System ROM or Option ROM firmware flash. If you do not have your recovery key or have not suspended encryption software, cancel this firmware upload. Failure to follow these instructions will result in loss of access to your data. To continue with firmware flash TPMOverrideFlag is required. Format: "CAUTION: A Trusted Module is detected in this system. Updating the System ROM or Option Card Firmware may have impact to measurements stored in the TM and may have impact to security functionality on the platform which depends on these measurements.” Severity: Warning Resolution: Please set the TPMOverrideFlag to true and try again.

Re: How to set the TPMOverrideFlag to true

Cali — Mon, 16 Sep 2024 09:24:55 GMT

Hi,

I don't know how you started this Update.

With iLO GUI, there is a TPM Override Check Box, in SUM also.
If using SUM by CLI the is a "/tpmbypass" or "/ignore" switch setting.
See: Disabling BitLocker to permit firmware updates

Cali

Re: How to set the TPMOverrideFlag to true

chrisarceo — Mon, 16 Sep 2024 09:24:06 GMT

@Cali We are applying a firmware update to mitigate the vulnerability.

Here's the installation instruction from the firmware which is via iloREST:

https://support.hpe.com/connect/s/softwaredetails?tab=Installation+Instructions&collectionId=MTX-6e357a862ebf4f37

I have already attempted using the iLO Gui however after flashing the firmware it flashes the wrong firmware, not the SPS (link above).