BIOS and iDRAC configuration recommendations

BIOS Configuration

The following table lists the BIOS configuration settings for server nodes implemented as Storage Spaces Direct cluster nodes.

BIOS Section	BIOS Token	PE Default Value	AX Value	Platform
Processor Settings	Virtualization Technology	Enabled	Enabled	AX-640 AX-740xd AX-650 AX-750 AX-6515 AX-7525
Processor Settings	x2APIC Mode	Enabled	Enabled	AX-640 AX-740xd AX-650 AX-750 AX-6515 AX-7525
Processor Settings	NUMA Nodes Per Socket	1	4	AX-6515 AX-7525
Integrated Devices	SR-IOV Global Enable	Disabled	Enabled	AX-640 AX-740xd AX-650 AX-750 AX-6515 AX-7525
System Profile Settings	Systems Profile	Performance Per Watt (DAPC)	Performance	AX-640 AX-740xd AX-650 AX-750 AX-6515 AX-7525
Systems Security	TPM Security	Off	On	AX-640 AX-740xd AX-650 AX-750 AX-6515 AX-7525
Systems Security	AC Power Recovery	NA	On	AX-640 AX-740xd AX-650 AX-750 AX-6515 AX-7525
Systems Security	AC Power Recovery Delay	NA	Random	AX-640 AX-740xd AX-650 AX-750 AX-6515 AX-7525
Systems Security	Secure Boot	Disabled	Enabled	AX-640 AX-740xd AX-650 AX-750 AX-6515 AX-7525
Processor Settings	Kernel DMA Protection	Disabled	Enabled	AX-650 AX-750 AX-7525
Processor Settings	Secure Memory Encryption	Disabled	Enabled	AX-7525
Processor Settings	Transparent Secure Memory Encryption	Disabled	Enabled	AX-7525
Systems Security	TPM PPI Bypass Provision	Disabled	Enabled	AX-650 AX-750 AX-7525
Systems Security	TPM PPI Bypass Clear	Disabled	Enabled	AX-650 AX-750 AX-7525
Systems Security	TPM2 Algorithm Selection	SHA1	SHA256	AX-650 AX-750 AX-7525
Systems Security	Intel TXT/AMD DRTM	Off	On	AX-650 AX-750 AX-7525
Systems Security	SMM Security Mitigation	Disabled	Enabled	AX-7525

iDRAC Configuration

The following table lists the iDRAC settings for server nodes configured as Azure Stack HCI cluster nodes.

Setting Category	Setting Name	Desired Value
Network Settings	Enable NIC	Enable
	NIC Selection	Dedicated
IPMI Settings	Enable IPMI Over LAN*	Enable
Power Configuration	Redundancy Policy	Input Power Redundant
	Enable Hot Spare	Enabled
	Primary Power Supply Unit	PSU1

*Required only if you plan to use SCVMM based management of bare-metal server.