How to backup the VROC key of DL380 Gen10 plus？

[duckiu]

hi hpe team,

I bought a DL380 Gen10 plus server with the R7J57A (INT VROC Prem FIO for DL360/380 Gen10 Plus). I can configure the NVMe drives as RAID1 and RAID5 in the BIOS. The VROC works great! But I didn't find the location of the VROC key backup, either on the motherboard or BIOS. Where does the VROC key live, the motherboard? Will the Key be lost after replacing the motherboard, how do I backup and import it?

Thank you very much for your answers, experts!

[TVVJ]

Hello,

You may refer to section "Intel VROC SED manager > Replacing system keys" of the Intel Virtual RAID on CPU for HPE Gen10 Plus User Guide for relevant operating system for more information.

[duckiu]

Hi  TVVJ,

Intel VROC SED manager is the key management for nvme data encryption. Not a VROC Upgrade key(Premium). You can read this document to know what is VROC upgrade key :https://www.intel.com/content/dam/support/us/en/documents/memory-and-storage/ssd-software/Intel_VROC_Upgrade_Key_Install_Guide.pdf .My HPE Gen10 plus server comes with this option.There is no VROC hardware key on the server's motherboard.Where is the VROC upgrade key? I think I will lose it if change the motherboard, how do I back it up

[duckiu]

[Tam92]

Hello,

I think Intel Forum would be the best to answer your queries in this matter.

Request you to contact Intel.

Thanks,

TAM

[duckiu]

Hi, Tam92.

I'll say it again. I bought a DL380 Gen10 plus server with R7J57A (INT VROC Prem FIO for DL360/380 Gen10 Plus).  Vroc works good.

DELL Lenovo IBM servers are inserted the VROC key on the motherboard, intel is same: https://www.intel.com/content/dam/support/us/en/documents/memory-and-storage/ssd-software/ Intel_VROC_Upgrade_Key_Install_Guide.pdf

But HPE is not like this, there is no VROC key on the motherboard! What should I do if the key is lost after changing the motherboard?

[Tam92]

Hello Duckiu,

Please find the document : https://www.hpe.com/psnow/doc/a50002570enw 

Intel VROC is integrated with the HPE BIOS

Thanks,

TAM

[duckiu]

@Tam92 

hello Tam92,

Thank you for thinking about this problem without perfunctory! “ Intel VROC is integrated with the HPE BIOS”. 

I have also found this doc. But I understand that there are many drivers integrated in UEFI, including array cards, network cards, and a host of other hardware. VROC is just one of them. It is possible that my think is wrong.

If I replace the motherboard VROC key will be lost, how do I go about backing it up? The VROC key is pre-installed when you buy the server, not with a file or email like ilo license

[Tam92]

Hello,

HPE has implemented a new licensing mechanism that does not require a HW Key, instead it uses a persistent BIOS parameter to save intel VROC licensing details.  This is known as Keyless Intel VROC. The Default Setting is pass-thru, and it can be changed to premium and intel SSD only later.

The license can be set through BIOS menu options.

If the board is replaced, you can simply reconfigure this in BIOS. There is no actual license key that you need to enter.

If it is a factory configured model, obviously it will be a part of the purchase order. But if it is an upgrade, that when you need to enable this in BIOS after making sure that the license is purchased.

Hope this answers your query.

Thanks,

TAM

[duckiu]

Hi Tam,

Thanks for your reply. At first I also thought it was backing up the VROC license in the BIOS. But there is no menu to set the VROC license in BIOS..   And Gen10 plus servers are sold with VROC licenses that are factory integrated. 

If you are sure there is an option in the BIOS to back up the VROC key, can you tell me the option ?

[Tam92]

Hello Duckiu,

There is no option to back up the license as there is no Key required. It is a keyless Intel VROC model now. 

This is the same place , where you can set it to Premium once the board is replaced.By default, it will show as Pass-thru.

There is no place in BIOS where you can enter the string. As this is factory integrated, you just need to Enable intel VROC option after the board replacement in BIOS and you are good to go. 

Thanks,

TAM

[duckiu]

Hi Tam,

There is no way to change the VROC Upgrade key in the picture... You can test it

[duckiu]

[Tam92]

Hi Dickiu,

I just tested this in Lab.

Restored the server to manufacturing defaults

No Intel VROC option seen

Then go to BIOS>Storage options>NVM Express Options, follow below

Change as required.

Reboot the server

It will automatically show as Premium

[duckiu]

Hi Tam.

My browser can't load your picture, but by the description this test is wrong. First of all the VROC key is integrated in the motherboard, after replacing the motherboard the new one is not integrated with the VROC key. What you did was just to turn on VMD, not to activate VROC key. you can read this document https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=a00083976en_us. DL and CL servers have different ipmi raw values. So this document does not apply to DL servers. But the DL server has no documentation

[Tam92]

Hello Dickiu,

As i already mentioned, it is a keyless Intel VROC in Gen10 plus. There is no HW key available.

If you need further clarity on this and documentation , please log a case with HPE support so that the detailed information can be shared.

Thank you,

TAM

[yellow02]

Hi Tam92,

I can’t see this image.(07-03-2022 08:37 PM)

Could you re-post?  

[duckiu]

The VROC Key for HPE servers is integrated into the server motherboard.

1.The server's motherboard comes with a VROC key from the factory. If the server motherboard fails and a new motherboard is replaced (without a VROC key), the VROC license for this server will be lost.

2.If the server did not come with a VROC key from the factory and the VROC key was purchased separately, there is no place to import the key.

HPE's strategy for integrating the VROC key is different from other manufacturers, and relevant information cannot be found online, including on Intel's website. I find it quite incomprehensible that HPE requires customers to contact Intel to confirm this issue.

[yellow02]

Hello duckiu,

Thanks for your reply!

What should I do when replacing the motherboard?
Is it necessary to change any settings after the replacement?
I want to see the images.....