Lenovo ThinkSystem ST250 V2 Server

The ThinkSystem ST250 V2 is a mainstream 1-socket tower server that also be rack mounted as a rack server. It is ideal for small-to-medium businesses, remote offices, branch offices, banking and public sector. The server supports one Intel Xeon E-2300 Series processor (formerly codenamed "Rocket Lake") or Intel Pentium ("Comet Lake Refresh") and up to 128 GB of 3200 MHz TruDDR4 ECC memory.

Figure 1 shows the ThinkSystem ST250 V2.

Figure 1. Lenovo ThinkSystem ST250 V2

The ThinkSystem ST250 V2 is an entry-level server with enterprise-grade management features and support for hot-swap power supplies and drives. It offers full support of Lenovo XClarity Administrator for comprehensive systems management and includes the next generation UEFI-based Lenovo XClarity Provisioning Manager for system setup and diagnosis, and the Lenovo XClarity Controller management processor for ongoing systems management and alerting. These tools make the ST250 V2 easy to deploy, integrate, service, and manage.

The ThinkSystem ST250 V2 is a office-friendly tower server that has been optimized to provide enterprise-class features to small businesses, retail, educational institutions and branch offices.

Scalability and performance

The ST250 V2 offers the following features to boost performance, improve scalability, and reduce costs:

• Improved single-socket processor performance:
  • Intel Xeon E-2300 Series processors ("Rocket Lake-E") up to to 8 cores and core speeds up to 3.7 GHz
  • Intel Pentium G6405, G6505 and G6605 processors ("Comet Lake Refresh") with 2 cores and core speeds up to 4.3 GHz
• Up to four 3200 MHz DDR4 ECC UDIMMs provide speed and capacity of up to 128 GB
• Four PCIe slots for I/O expansion, one of which has the new PCIe Gen4 interface to maximize I/O performance.
• Flexible storage configurations support either 2.5-inch or 3.5-inch hot-swap drive bays or a combination of the two (hybrid configuration). Drive bays support SAS and SATA HDDs and SSDs.
  • Up to 16x 2.5-inch hot-swap drive bays
  • Up to 8x 3.5-inch hot-swap drive bays
  • Up to 4x 3.5-inch + 8x 2.5-inch drive bays
• The server also supports simple-swap drives, include 1x NVMe drive:
  • Up to 8x 3.5-inch SATA drive bays
  • Up to 7x 3.5-inch SATA drive bays + 1x 3.5-inch NVMe drive bay
• The use of solid-state drives (SSDs) instead of, or along with, traditional hard disk drives (HDDs) can significantly improve I/O performance. An SSD can support up to 100 times more I/O operations per second (IOPS) than a typical HDD
• New high-speed RAID controllers from Lenovo and Broadcom provide 12 Gb SAS connectivity to the drive backplanes
• Offers two 5.25-inch media bays with support for optical drives or backup drives
• Supports two M.2 drives for OS boot support with VROC RAID redundancy
• The server has two integrated Gigabit Ethernet ports
• The server offers one PCIe 4.0 slot plus three PCIe 3.0 I/O expansion slots
• Support for a NVIDIA GPU for enhanced workload performance

Manageability and security

The following systems management features simplify local and remote management of the ST250 V2:

• The server includes an XClarity Controller (XCC) to monitor server availability. Optional upgrade to XCC Advanced to provide remote control (keyboard video mouse) functions. Optional upgrade to XCC Enterprise enables the additional support for the mounting of remote media files (ISO and IMG image files), boot capture, and power capping.
• Lenovo XClarity Administrator offers comprehensive hardware management tools that help to increase uptime, reduce costs and improve productivity through advanced server management capabilities.
• New UEFI-based Lenovo XClarity Provisioning Manager, accessible from F1 during boot, provides system inventory information, graphical UEFI Setup, platform update function, RAID Setup wizard, operating system installation function, and diagnostic functions.
• Support for Lenovo XClarity Energy Manager which captures real-time power and temperature data from the server and provides automated controls to lower energy costs.
• Integrated Trusted Platform Module (TPM) 2.0 support enables advanced cryptographic functionality, such as digital signatures and remote attestation.
• Industry-standard Advanced Encryption Standard (AES) NI support for faster, stronger encryption.
• Intel Execute Disable Bit functionality can prevent certain classes of malicious buffer overflow attacks when combined with a supported operating system.
• Intel Trusted Execution Technology (Intel Xeon E processors only) provides enhanced security through hardware-based resistance to malicious software attacks, allowing an application to run in its own isolated space, protected from all other software running on a system.
• Helps prevent unauthorized software from running on the server by protecting against boot block-level malicious software with Intel Boot Guard technology.
• Protects application code and data from disclosure or modification with Intel Software Guard Extensions (SGX), enabling high-assurance security use cases, such as blockchain, identity and records privacy, secure browsing, and digital rights management (DRM).
• Physical security measures to prevent unauthorized access: Loop for a padlock to prevent the side panel from being opened and a slot at the rear of the server for a Kensington Cable Lock. Optional additional physical security features are a lockable front security door and a chassis intrusion switch (included in some models).

Energy efficiency

The ST250 V2 offers the following energy saving features to save energy, reduce operational costs, increase energy availability, and contribute to the green environment:

• Energy-efficient planar components help lower operational costs.
• High-efficiency power supplies with 80 PLUS Platinum certifications. Energy Star certified.
• Intel Intelligent Power Capability powers individual processor elements on and off as needed to reduce power draw.
• Low-voltage 1.2 V DDR4 memory DIMMs use up to 20% less energy compared to 1.35 V DDR3 DIMMs.
• SSDs use as much as 80% less power than traditional spinning HDDs.
• The server uses hexagonal ventilation holes, which can be grouped more densely than round holes, providing more efficient airflow through the system.
• Optional Lenovo XClarity Energy Manager provides advanced data center power notification, analysis, and policy-based management to help achieve lower heat output and reduced cooling needs.

The ThinkSystem ST250 V2 improves on the previous generation ST250, as summarized in the following table.

The following figure shows the architectural block diagram of the ST250 V2, showing the major components and their connections.

Figure 5. ST250 V2 system architectural block diagram

The following table lists the standard specifications.

ThinkSystem ST250 V2 models can be configured by using the Lenovo Data Center Solution Configurator (DCSC).

Preconfigured server models may also be available for the ST250 V2, however these are region-specific; that is, each region may define their own server models, and not all server models are available in every region.

The following table lists the base CTO models of the ThinkSystem ST250 V2 server.

Models of the ST250 V2 are defined based on whether the server has 2.5-inch drive bays at the front (called the 2.5-inch chassis) or whether it has 3.5-inch drive bays at the front (called the 3.5-inch chassis). For models, the feature codes for these chassis bases are as listed in the following table.

The following tables list the available models, grouped by region.

• Models for Asia Pacific region
• Models for Australia and New Zealand
• Models for Brazil
• Models for EMEA countries
• Models for Hong Kong, Taiwan, Korea (HTK)
• Models for India
• Models for Japan
• Models for Latin American countries (except Brazil)
• Models for USA and Canada

Refer to the Specifications section for information about standard features of the server.

The ST250 V2 supports one processor from the following Intel product families:

• Intel Xeon E-2300 Series processors ("Rocket Lake-E")
• Intel Pentium G6405, G6505 and G6605 processors ("Comet Lake Refresh")

All supported processors have the following characteristics:

• LGA 1200 socket (Socket H5)
• 14 nm semiconductor process technology
• Direct Media Interface (DMI) 3.0 connection to PCH
  • Xeon E-2300: DMI 3.0 x8 connection
  • Pentium: DMI 3.0 x4 connection
• Two DDR4 memory channels
• Support for ECC memory
  • Xeon E-2300: Up to 3200 MHz memory speed
  • Pentium: Up to 2666 MHz memory speed
• PCIe lanes:
  • Xeon E-2300: 20x PCIe 4.0 I/O lanes
  • Pentium: 16x PCIe 3.0 I/O lanes

The following table lists the supported processors.

The following table lists the feature codes that allow you to specify the mode you wish to preset in the factory for CTO orders.

The preset modes for the ST250 V2 are as follows:

• Maximum Performance Mode (feature BFYB): Achieves maximum performance but with higher power consumption and lower energy efficiency.
• Efficiency Favoring Performance Mode (feature BFYE): Maximize the performance/watt efficiency with a bias towards performance. This is the favored mode for Energy Star certification, for example.

The ST250 V2 supports Lenovo TruDDR4 memory. TruDDR4 memory uses the highest-quality components sourced from Tier 1 DRAM suppliers and only memory that meets strict requirements is selected. It is compatibility-tested and tuned to maximize performance and reliability.

TruDDR4 memory has a unique signature programmed into the DIMM, which enables ThinkSystem servers to verify whether the memory installed is qualified and supported. From a service and support standpoint, TruDDR4 memory automatically assumes the system's warranty, and service and support provided worldwide.

The processors have 2 memory channels and support 2 DIMMs per channel. The ST250 V2 supports 1, 2 or 4 DIMMs. 3 installed DIMMs is not supported. All DIMMs installed must be identical.

DIMMs installed in the ST250 V2 operate at a speed based on the processor installed, the number of DIMMs installed, and whether the DIMMs are single-rank or dual-rank:

• When connected to a Xeon processor:
  • 1 or 2 DIMMs: 3200 MHz
  • 4 single-rank (1R) DIMMs: 3200 MHz
  • 4 dual-rank (2R) DIMMs: 2933 MHz
• When connected to a Pentium processor:
  • 1 or 2 DIMMs (1 DPC): 2666 MHz
  • 4 single-rank (1R) DIMMs: 2666 MHz
  • 4 dual-rank (2R) DIMMs: 2400 MHz

The following table lists the memory options that are available for the ST250 V2 server.

The following rules apply when selecting the memory configuration:

• The server only supports UDIMMs
• Quantities of 1, 2 or 4 DIMMs are supported. 3 DIMMs is not supported.
• All DIMMs must be identical (same part number)
• When installing two DIMMs, install one in each memory channel (DIMM slots 1 and 3)
• Memory mirroring and memory rank sparing are not supported

The ST250 V2 supports 2.5-inch hot-swap, 3.5-inch hot-swap, and 3.5-inch simple-swap drives in a variety of drive bay configurations.

Drive bays and backplanes

The server supports up to 16 drive bays:

• Up to 16x 2.5-inch hot-swap drives
• Up to 8x 3.5-inch drives hot-swap drives
• Up to 8x 3.5-inch simple-swap drives
• A combination of 8x 2.5" hot-swap and 4x 3.5" hot-swap drives.

Hot-swap configurations SAS and SATA drives depending on the controller used (the onboard SATA controller supports SATA drives only). Simple-swap drive configurations support SATA drives only, or SATA drives plus a single NVMe drive.

The different drive bay configurations supported are shown in the following figure. The server also supports two M.2 drives, installed in a PCIe slot as shown in the internal view of the server.

Figure 6. Internal drive bay configurations

The following table lists the available hot-swap and simple-swap backplanes for configure-to-order builds. See the Field upgrades section for option part numbers.

Configuration notes regarding drive bays with the use of the onboard SATA controller:

• The onboard SATA controller has 8 SATA ports, which means that up to 8 SATA drives can be connected provided no optical drive is installed.
• If the onboard SATA controller is used and an optical drive is installed, then at most 6 drives can be installed. The other 2 onboard SATA ports are reserved for optical drives, even if only 1 optical drive is installed.
• The ST250 V2 also supports the use of a RAID adapter or SAS host bus adapter to support the use of SAS drives plus offering higher performance features and RAID functionality. Configurations guidance is as follows:
  • For 8-bay configurations, use one of the supported 8-port RAID adapters or HBA
  • For 12-bay or 16-bay configurations, use one of the supported 16-port RAID adapters
  • It is supported to add 1 or 2 optical drives to a RAID adapter/HBA configuration

Field upgrades

The following table lists the supported field upgrades. The table refers to configurations which are described in the Storage configurations section.

The following table lists the contents of the option part numbers for field upgrades.

The supercap is installed in the supercap holder than is located inside the server as shown in Components and connectors section.

For CTO orders, the required supercap holder is derived by the configurator. For field upgrades that add a RAID card with supercap, you will need to order the RAID Cable Kit, as listed in the following table. The cable kit includes two supercap holders, one for use with RAID 940 adapters, and one for use with RAID 9350 adapters.

The following figure shows the M.2 adapter for the ST250 V2.

Figure 7. M.2 adapter with two M.2 drives installed in a PCIe slot

The following table lists the ordering information. For field upgrades, in addition to the ThinkSystem M.2 SATA/NVMe 2-Bay Enablement Adapter, you will also need to order the M.2 Signal & Power Cable Kit.

Supported drives are listed in the Internal drive options section.

Configuration rules:

• The M.2 PCIe adapter is only supported in slot 4
• M.2 is mutually exclusive with the use of optical drives (ODDs) as they share the same connector.

The M.2 SATA/NVMe 2-Bay Enablement Kit has the following features when installed in the ST250 V2:

• Supports one or two M.2 SATA drives
• Support 42mm, 60mm, 80mm and 110mm drive form factors (2242, 2260, 2280 and 22110)
• JBOD native support; no built-in RAID support (RAID can be enabled via Intel VROC SATA RAID)
• Supports monitoring and reporting of events and temperature through I2C
• Firmware update via Lenovo firmware update tools

For details about M.2 components, see the ThinkSystem M.2 Drives and M.2 Adapters product guide:
https://lenovopress.com/lp0769-thinksystem-m2-drives-adapters

The IBM Security Key Lifecycle Manager software is available from Lenovo using the ordering information listed in the following table.

The ST250 V2 supports the use of the onboard 6Gb SATA ports to connect SATA drives. Hot-swap and simple-swap SATA drives are supported. These onboard SATA ports support RSTe mode for RAID functionality or AHCI mode for JBOD support.

In addition to the onboard SATA controller, the ST250 V2 with hot-swap drives supports the use of an internal RAID adapter or HBA. The following table lists the supported adapters.

For a comparison of the functions of the supported storage adapters, see the ThinkSystem RAID Adapter and HBA Reference:
https://lenovopress.com/lp1288-thinksystem-raid-adapter-and-hba-reference#st250-v2-support= ST250%2520V2

Configuration notes:

• Virtualization support: The onboard SATA ports can be used with virtualization hypervisors, including VMware ESXi, Linux KVM, Xen, and Microsoft Hyper-V, however support is limited to AHCI (non-RAID) mode. RSTe mode is not supported with virtualization hypervisors.
• Windows support: Windows only supports a RSTe-based RAID array of no more than 6 drives.

• E810 Ethernet and X350 RAID/HBAs: The use of both an Intel E810 network adapter and an X350 HBA/RAID adapter (9350, 5350 and 4350) is supported, however E810 firmware CVL4.3 or later is required. For details, see Support Tip HT513226.

The following tables list the drive options for internal storage of the server.

The ST250 V2 supports the internal backup unit options that are listed in the following table.

The RDX dock is attached via the internal USB 3.0 port on the system board. The USB cable ships with the dock. The RDX dock is supported only in the lower media bay (Bay 0).

For more information about the RDX dock, see the Backup Units page on the Lenovo Press site: https://lenovopress.com/servers/options/backup

The ST250 V2 supports the internal optical drive options listed in the following table. The internal optical are installed in the 5.25-inch media drive bays.

The server supports the external USB optical drive listed in the following table.

The drive is based on the Lenovo Slim DVD Burner DB65 drive and supports the following formats: DVD-RAM, DVD-RW, DVD+RW, DVD+R, DVD-R, DVD-ROM, DVD-R DL, CD-RW, CD-R, CD-ROM.

Slot 1 and slot 3 in the ST250 V2 are an open-end design, which means that it can accept adapters with a longer edge connector than the physical length of the slot connector. For example, if a x8 adapter is installed in the x4 slot 3 of the server, half of the edge connector will not be connected to the slot. The adapter will still function, however performance will be impacted.

The ST250 V2 has two onboard Gigabit Ethernet ports, connected to a Broadcom BCM5720 embedded controller.

The BCM5720 embedded controller has the following features:

• Two 10/100/1000 Mb Ethernet RJ-45 ports
• NIC Teaming (load balancing and failover)
• IEEE 802.3ad Link Aggregation
• I/O Virtualization (IOV) for VMWare NetQueue and Microsoft VMQ
• IEEE 802.1Q Virtual Local Area Networks (VLANs)
• IEEE 802.3x flow control
• TCP, IP, and UDP checksum offload
• Large Send Offload (LSO) and TCP Segmentation Offload (TSO)
• Receive Side Scaling (RSS) and Transmit Side Scaling (TSS)
• Jumbo frames up to 9600 bytes
• IEEE 802.3az-2010 Energy Efficient Ethernet (EEE) compliant
• Hardware assist for IEEE 1588 and IEEE 802.1AS time synchronization implementations
• Preboot eXecution Environment (PXE) remote boot
• Wake on LAN (WOL) support

The following table lists other supported network adapters. The maximum supported column indicates which slots each adapter is supported in. For slot locations see the I/O expansion options section.

• E810 Ethernet and X350 RAID/HBAs: The use of both an Intel E810 network adapter and an X350 HBA/RAID adapter (9350, 5350 and 4350) is supported, however E810 firmware CVL4.3 or later is required. For details, see Support Tip HT513226.

The following table lists the adapters suitable for connectivity to external SAS storage.

For a comparison of the functions of the supported external storage adapters, see the ThinkSystem RAID Adapter and HBA Reference:
https://lenovopress.com/lp1288#st250-v2-support=ST250%20V2&internal-or-external-ports=External

The ST250 V2 does not currently support Fibre Channel host bus adapters.

The ST250 V2 does not currently support Flash Storage adapters.

The ST250 V2 server supports the graphics processing units (GPUs) listed in the following table.

The following rule applies:

• The use of a GPU requires 550W hot-swap power supplies
• Slot 3 must be left unoccupied for thermal reasons

For information about GPUs, see the ThinkSystem GPU Summary:
https://lenovopress.com/lp0768-thinksystem-gpu-summary

The ST250 V2 has the following variable-speed fans. All fans are fixed (non-hot-swap).

• One or two system fans at the front of the server, mounted on the drive cages. If the server has one drive cage, only one front fan is included.
• One system fan at the rear of the server
• Fan mounted on the heatsink of the processor
• One fan in each power supply

See the Inside view in the Components and connectors section for locations.

The server supports either a single fixed power supply or one or two hot-swap power supplies. When two hot-swap power supplies are installed, they form a redundant pair. The following table lists the supported power supplies.

Power supply options do not include a line cord.

For server configurations, the inclusion of a power supply is model dependent. Configure-to-order models can be configured without a power cord if desired.

The following table lists the maximum configuration for the 250W and 300W power supplies.

To ensures that the properly sized power supply is chosen for optimal performance, it is highly recommended to validate system configuration for specific power requirements by using the latest version of the Lenovo Capacity Planner:
https://datacentersupport.lenovo.com/us/en/products/solutions-and-software/software/lenovo-capacity-planner/solutions/ht504651

The ST250 V2 contains an integrated service processor, XClarity Controller (XCC), which provides advanced service-processor control, monitoring, and alerting functions. The XCC is based on the Pilot4 XE401 baseboard management controller (BMC) using a dual-core ARM Cortex A9 service processor.

• Front operator panel
• System status with XClarity Mobile
• Remote management
• Lenovo XClarity Provisioning Manager
• Lenovo XClarity Administrator
• Lenovo XClarity Integrators
• Lenovo XClarity Essentials
• Lenovo XClarity Energy Manager

The steps to connect the mobile device are as follows:

1. Enable USB Management on the server, by holding down the ID button for 3 seconds (or pressing the dedicated USB management button if one is present)
2. Connect the mobile device via a USB cable to the server's USB port with the management symbol
3. In iOS or Android settings, enable Personal Hotspot or USB Tethering
4. Launch the Lenovo XClarity Mobile app

Remote management

The server offers a dedicated RJ45 port at the rear of the server for remote management via the XClarity Controller management processor. The port supports 10/100/1000 Mbps speeds.

Remote server management is provided through industry-standard interfaces:

• Intelligent Platform Management Interface (IPMI) Version 2.0
• Simple Network Management Protocol (SNMP) Version 3 (no SET commands; no SNMP v1)
• Common Information Model (CIM-XML)
• Representational State Transfer (REST) support
• Redfish support (DMTF compliant)
• Web browser - HTML 5-based browser interface (Java and ActiveX not required) using a responsive design (content optimized for device being used - laptop, tablet, phone) with NLS support

IPMI via the Ethernet port (IPMI over LAN) is supported, however it is disabled by default. For CTO orders you can specify whether you want to the feature enabled or disabled in the factory, using the feature codes listed in the following table.

There are two XClarity Controller upgrades available for the server, Advanced and Enterprise.

Lenovo XClarity Controller Advanced adds the following remote control functions:

• Remotely viewing video with graphics resolutions up to 1600x1200 at 75 Hz with up to 23 bits per pixel, regardless of the system state
• Remotely accessing the server using the keyboard and mouse from a remote client
• Capturing blue-screen errors
• International keyboard mapping support
• LDAP-based authentication

Lenovo XClarity Controller Enterprise enables the following additional features:

• Boot Capture
• Remote mounting of CD-ROM (ISO) and diskette (IMG) files as virtual drives
• Virtual console collaboration - Ability for up to 6 remote users to be log into the remote session simultaneously
• Power capping
• License for XClarity Energy Manager

Because Lenovo XClarity Administrator does not require any agent software to be installed on the managed endpoints, there are no CPU cycles spent on agent execution, and no memory is used, which means that up to 1GB of RAM and 1 - 2% CPU usage is saved, compared to a typical managed system where an agent is required.

Lenovo XClarity Administrator is an optional software component for the ST250 V2. The software can be downloaded and used at no charge to discover and monitor the ST250 V2 and to manage firmware upgrades.

If software support is required for Lenovo XClarity Administrator, or premium features such as configuration management and operating system deployment are required, Lenovo XClarity Pro software subscription should be ordered. Lenovo XClarity Pro is licensed on a per managed system basis, that is, each managed Lenovo system requires a license.

The following table lists the Lenovo XClarity software license options.

For more information, refer to the Lenovo XClarity Administrator Product Guide:
http://lenovopress.com/tips1200

For more information about all the available Lenovo XClarity Integrators, see the Lenovo XClarity Administrator Product Guide: https://lenovopress.com/tips1200-lenovo-xclarity-administrator

LXEM is a licensed product. A single-node LXEM license is included with the XClarity Controller Enterprise upgrade as described in the Remote Management section. If your server does not have the XCC Enterprise upgrade, Energy Manager licenses can be ordered as shown in the following table.

Topics in this section:

• Security features
• Platform Firmware Resiliency - Lenovo ThinkShield
• Intel Transparent Supply Chain
• Security standards

Security features

The ST250 V2 offers the following security features:

• Electronic security measures:
  • Administrator and power-on passwords
  • Secure firmware updates
  • Trusted Platform Module (TPM) supporting TPM 2.0
  • For China customers, the Nationz TPM plug-in module
  • Self-encrypting drives with support for IBM Security Key Lifecycle Manager
• Mechanical security measures
  • Loop for a padlock to prevent the side panel from being opened
  • Slot at the rear of the server for a Kensington Cable Lock
  • Optional lockable front door
  • Optional chassis intrusion switch

The server is NIST SP 800-147B compliant.

The Nationz TPM module is installed in a dedicated socket on the system board. See the Components and connectors section for locations of physical components.

The following table lists the security options for the server.

For self-encrypting drives (SEDs) with support for enterprise key managers, see the SED encryption key management section.

Platform Firmware Resiliency - Lenovo ThinkShield

Lenovo's ThinkShield Security is a transparent and comprehensive approach to security that extends to all dimensions of our data center products: from development, to supply chain, and through the entire product lifecycle.

The ThinkSystem ST250 V2 includes Platform Firmware Resiliency (PFR) hardware Root of Trust (RoT) which enables the system to be NIST SP800-193 compliant. This offering further enhances key platform subsystem protections against unauthorized firmware updates and corruption, to restore firmware to an integral state, and to closely monitor firmware for possible compromise from cyber-attacks.

PFR operates upon the following server components:

• UEFI image – the low-level server firmware that connects the operating system to the server hardware
• XCC image – the management “engine” software that controls and reports on the server status separate from the server operating system
• FPGA image – the code that runs the server’s lowest level hardware controller on the motherboard

The Lenovo Platform Root of Trust Hardware performs the following three main functions:

• Detection – Measures the firmware and updates for authenticity
• Recovery – Recovers a corrupted image to a known-safe image
• Protection – Monitors the system to ensure the known-good firmware is not maliciously written

These enhanced protection capabilities are implemented using a dedicated, discrete security processor whose implementation has been rigorously validated by leading third-party security firms. Security evaluation results and design details are available for customer review – providing unprecedented transparency and assurance.

The ST250 V2 includes support for Secure Boot, a UEFI firmware security feature developed by the UEFI Consortium that ensures only immutable and signed software are loaded during the boot time. The use of Secure Boot helps prevent malicious code from being loaded and helps prevent attacks, such as the installation of rootkits. Lenovo offers the capability to enable secure boot in the factory, to ensure end-to-end protection. Alternatively, Secure Boot can be left disabled in the factory, allowing the customer to enable it themselves at a later point, if desired.

The following table lists the relevant feature code(s).

Security standards

The ST250 V2 supports the following security standards and capabilities:

• Industry Standard Security Capabilities
  • Intel CPU Enablement
    • AES-NI (Advanced Encryption Standard New Instructions)
    • Secure Key
    • SGX (Software Guard eXtensions)
    • OS Guard
    • TXT (Trusted eXecution Technology)
    • XD (eXecute Disable)
    • Boot Guard
    • VT (Virtualization Technology)
    • Maximum Enclave Page Cache (EPC) Size for Intel SGX
  • Microsoft Windows Security Enablement
    • Credential Guard
    • Device Guard
    • Host Guardian Service
  • TCG (Trusted Computing Group) TPM (Trusted Platform Module) 2.0
  • UEFI (Unified Extensible Firmware Interface) Forum Secure Boot
• Hardware Root of Trust and Security
  • Independent security subsystem providing platform-wide NIST SP800-193 compliant Platform Firmware Resilience (PFR)
  • Management domain RoT supplemented by the Secure Boot features of XCC
• Platform Security
  • Boot and run-time firmware integrity monitoring with rollback to known-good firmware (e.g., “self-healing”)
  • Non-volatile storage bus security monitoring and filtering
  • Resilient firmware implementation, such as to detect and defeat unauthorized flash writes or SMM (System Management Mode) memory incursions
  • Patented IPMI KCS channel privileged access authorization (USPTO Patent# 11,256,810)
  • Host and management domain authorization, including integration with CyberArk for enterprise password management
  • KMIP (Key Management Interoperability Protocol) compliant, including support for IBM SKLM and Thales KeySecure
  • Reduced “out of box” attack surface
  • Configurable network services

  For more information on platform security, see the paper “How to Harden the Security of your ThinkSystem Server and Management Applications” available from https://lenovopress.com/lp1260-how-to-harden-the-security-of-your-thinksystem-server.

• Standards Compliance and/or Support
  • NIST SP800-131A rev 2 “Transitioning the Use of Cryptographic Algorithms and Key Lengths”
  • NIST SP800-147B “BIOS Protection Guidelines for Servers”
  • NIST SP800-193 “Platform Firmware Resiliency Guidelines”
  • ISO/IEC 11889 “Trusted Platform Module Library”
  • Common Criteria TCG Protection Profile for “PC Client Specific TPM 2.0”
  • European Union Commission Regulation 2019/424 (“ErP Lot 9”) “Ecodesign Requirements for Servers and Data Storage Products” Secure Data Deletion
  • Optional FIPS 140-2 validated Self-Encrypting Disks (SEDs) with external KMIP-based key management
• Product and Supply Chain Security
  • Suppliers validated through Lenovo’s Trusted Supplier Program
  • Developed in accordance with Lenovo’s Secure Development Lifecycle (LSDL)
  • Continuous firmware security validation through automated testing, including static code analysis, dynamic network and web vulnerability testing, software composition analysis, and subsystem-specific testing, such as UEFI security configuration validation
  • Ongoing security reviews by US-based security experts, with attestation letters available from our third-party security partners
  • Digitally signed firmware, stored and built on US-based infrastructure and signed on US-based Hardware Security Modules (HSMs)
  • Manufacturing transparency via Intel Transparent Supply Chain (for details, see https://lenovopress.com/lp1434-introduction-to-intel-transparent-supply-chain-on-lenovo-thinksystem-servers)
  • TAA (Trade Agreements Act) compliant manufacturing, by default in Mexico for North American markets with additional US and EU manufacturing options
  • US 2019 NDAA (National Defense Authorization Act) Section 889 compliant

The following table lists the supported full-sized USB keyboards and mice available for Lenovo ThinkSystem servers.

The keyboards have the following features:

• Full-sized 104-key keyboard with 3 special Windows keys
• 3 LEDs for caps lock, scroll lock and num lock
• Wired USB connection with 1.8m cable
• Adjustable feet at the rear of the keyboard

The ST250 V2 can be installed in the rack with the Rack Mount Kit, which converts the server to a rack-mountable server.

Part number information is listed in the following table. The kit can only be ordered as an option part number, not in a CTO order.

The rack mount kit includes the following items:

• 1U tray to hold the server horizontally
• Left and right slide rails
• Cable management arm
• Brackets and other hardware
• Installation instructions

The following table summarizes the rail kit features and specifications.

The server supports the following operating systems:

• Microsoft Windows Server 2019
• Microsoft Windows Server 2022
• Red Hat Enterprise Linux 8.4
• Red Hat Enterprise Linux 8.5
• Red Hat Enterprise Linux 8.6
• Red Hat Enterprise Linux 8.7
• Red Hat Enterprise Linux 8.8
• Red Hat Enterprise Linux 8.9
• Red Hat Enterprise Linux 8.10
• Red Hat Enterprise Linux 9.0
• Red Hat Enterprise Linux 9.1
• Red Hat Enterprise Linux 9.2
• Red Hat Enterprise Linux 9.3
• Red Hat Enterprise Linux 9.4
• Red Hat Enterprise Linux 9.5
• SUSE Linux Enterprise Server 15 SP3
• SUSE Linux Enterprise Server 15 SP4
• SUSE Linux Enterprise Server 15 SP5
• SUSE Linux Enterprise Server 15 Xen SP3
• SUSE Linux Enterprise Server 15 Xen SP4
• SUSE Linux Enterprise Server 15 Xen SP5
• Ubuntu 22.04 LTS 64-bit
• Ubuntu 24.04 LTS 64-bit
• VMware ESXi 7.0 U3
• VMware ESXi 8.0
• VMware ESXi 8.0 U1
• VMware ESXi 8.0 U2
• VMware ESXi 8.0 U3

For a complete list of supported, certified and tested operating systems, plus additional details and links to relevant web sites, see the Operating System Interoperability Guide: https://lenovopress.com/osig

Virtualization support: The onboard SATA ports of the server can be used with virtualization hypervisors, including VMware ESXi, Linux KVM, Xen, and Microsoft Hyper-V, however support is limited to AHCI (non-RAID) mode. RSTe mode is not supported with virtualization hypervisors.

For configure-to-order configurations, the ST250 V2 can be preloaded with VMware ESXi. Ordering information is listed in the following table.

Configuration rule:

• An ESXi preload cannot be selected if the configuration includes an NVIDIA GPU (ESXi preload cannot include the NVIDIA driver)

You can download supported VMware vSphere hypervisor images from the following web page and install it using the instructions provided:
https://vmware.lenovo.com/content/custom_iso/

The ST250 V2 has the following overall physical dimensions, including tower feet, excluding components that extend outside the standard chassis, such as power supply handles:

• Width: 176 mm (6.9 inches)
• Height: 444 mm (17.5 inches)
• Depth: 578 mm (22.8 inches)

The following table lists the detailed dimensions. See the figure below for the definition of each dimension.

Figure 11. Server dimension

The server has the following weight:

• Weight, fully configured: 23.6 kg (52 lb)

Electrical requirements are as follows:

• Models with a 250 W AC fixed power supply:
  • 100-127 (nominal) V ac; 50 Hz or 60 Hz, 2.93 A
  • 200-240 (nominal) V ac; 50 Hz or 60 Hz, 1.28 A
• Models with a 300 W AC fixed power supply:
  • 100-127 (nominal) V ac; 50 Hz or 60 Hz, 3.56 A
  • 200-240 (nominal) V ac; 50 Hz or 60 Hz, 1.55 A
• Models with 550 W AC hot-swap power supplies:
  • 100-127 (nominal) V ac; 50 Hz or 60 Hz; 6.35 A
  • 200-240 (nominal) V ac; 50 Hz or 60 Hz; 2.75 A

Note for customers in China: 240V DC is not supported.

The server is designed to operate in ASHRAE A2 environments (10-35°C). With certain configurations, the server can also operate within ASHRAE Class A3 and A4 specifications. System performance may be impacted when operating temperature is outside ASHRAE A2 specification.

Temperature and humidity

The server is supported operating in the following environments:

• ASHRAE A2:
  • Temperature: 10°C to 35°C
  • Humidity: 8% to 80%
  • Altitude 0-3000 m (10,000 ft), derated 1°C per 300 m above 950 m
• ASHRAE A3:
  • Temperature: 5°C to 40°C
  • Humidity: 8% to 85%
  • Altitude 0-3000 m (10,000 ft), derated 1°C per 175 m above 950 m
• ASHRAE A4:
  • Temperature: 5°C to 45°C
  • Humidity: 8% to 90%
  • Altitude 0-3000 m (10,000 ft), derated 1°C per 175 m above 950 m

Non-operating environment support:

• Without packaging:
  • Temperature: -10 °C to 60 °C
  • Humidity: 8 to 90%
• Storage with packaging:
  • Temperature: -40 °C to 70 °C
  • Humidity: 8 to 90%

Heat output

Thermal (heat) output:

• Minimum configuration: 358.05 BTU per hour (105 watts)
• Maximum configuration: 1029.82 BTU per hour (302 watts)

Acoustical noise emissions

The server has the following acoustic noise emissions declaration:

• Sound power level (L_WAd):
  • Idling: 4.3 Bel (Typical), 4.4 Bel (Max)
  • Operating: 4.3 Bel (Typical), 4.5 Bel (Max)
• Sound pressure level (L_pAm):
  • Idling: 27.4 dBA (Typical), 28.6 dBA (Max)
  • Operating: 27.6 dBA (Typical), 29.0 dBA (Max)

Note:

• These sound levels were measured in controlled acoustical environments according to procedures specified by ISO7779 and are reported in accordance with ISO 9296, SPL is measured by bystander position (1m).
• The declared acoustic sound levels are based on the following configurations, which may change depending on configuration/conditions, for example M.2 drive, Broadcom 57414 25Gb NIC, Broadcom 57416 10Gb NIC, T1000, etc.
  • Typical: 1x 80W CPU, 4x 32GB DIMM, 2x HDD or SSD, RAID 5350-8i, 1x 300W PSU
  • Max: 1x 95W CPU, 4x 32GB DIMM, 2x HDD or SSD, 2x 550W PSU

Shock and vibration

The server has the following vibration and shock limits:

• Vibration:
  • Operating: 0.21 G rms at 5 Hz to 500 Hz for 15 minutes across 3 axes
  • Non-operating: 1.04 G rms at 2 Hz to 200 Hz for 15 minutes across 6 surfaces
• Shock:
  • Operating: 15 G for 3 milliseconds in each direction (positive and negative X, Y, and Z axes)
  • Non-operating:
    • 4 kg - 11 kg: 50 G for 167 in./sec velocity change across 6 surfaces
    • 12 kg - 22 kg: 50 G for 152 in./sec velocity change across 6 surfaces
    • 23 kg - 31 kg: 35 G for 152 in./sec velocity change across 6 surfaces

The following specifications indicate the limits of particulates that the system can tolerate:

• Reactive gases:
  • The copper reactivity level shall be less than 200 Angstroms per month (Å/month)
  • The silver reactivity level shall be less than 200 Å/month
• Airborne particulates:
  • The room air should be continuously filtered with MERV 8 filters.
  • Air entering a data center should be filtered with MERV 11 or preferably MERV 13 filters.
  • The deliquescent relative humidity of the particulate contamination should be more than 60% RH
  • Environment must be free of zinc whiskers

For additional information, see the Specifications section of the documentation for the server, available from the Lenovo Documents site, https://pubs.lenovo.com/

The ST250 V2 has a 1-year or 3-year warranty, based on the machine type of the system:

• 7D8G - 1 year warranty
• 7D8F - 3 year warranty

For more information, consult the brochure Lenovo Operational Support Services for Data Centers Services.

Lenovo Data Center Services empower you at every stage of your IT lifecycle. From expert advisory and strategic planning to seamless deployment and ongoing support, we ensure your infrastructure is built for success. Our comprehensive services accelerate time to value, minimize downtime, and free your IT staff to focus on driving innovation and business growth.

In this section:

• Lenovo Advisory Services
• Lenovo Plan & Design Services
• Lenovo Deployment, Migration, and Configuration Services
• Lenovo Support Services
• Lenovo Managed Services
• Lenovo Sustainability Services

Lenovo Deployment, Migration, and Configuration Services

Optimize your IT operations by shifting labor-intensive functions to Lenovo's skilled technicians for seamless on-site or remote deployment, configuration, and migration. Enjoy peace of mind, faster time to value, and comprehensive knowledge sharing with your IT staff, backed by our best-practice methodology.

• Deployment Services for Storage and ThinkAgile

  A comprehensive range of remote and onsite options tailored specifically for your business needs to ensure your storage and ThinkAgile hardware are fully operational from the start.

• Hardware Installation Services

  A full-range, comprehensive setup for your hardware, including unpacking, inspecting, and positioning components to ensure your equipment is operational and error-free for the most seamless and efficient installation experience, so you can quickly benefit from your investments.

• DM/DG File Migration Services

  Take the burden of file migration from your IT’s shoulders. Our experts will align your requirements and business objectives to the migration plans while coordinating with your team to plan and safely execute the data migration to your storage platforms.

• DM/DG/DE Health Check Services

  Our experts perform proactive checks of your Firmware and system health to ensure your machines are operating at peak and optimal efficiency to maximize up-time, avoid system failures, ensure the security of IT solutions and simplify maintenance.

• Factory Integrated Services

  A suite of value-added offerings provided during the manufacturing phase of a server or storage system that reduces time to value. These services aim at improving your hardware deployment experience and enhance the quality of a standard configuration before it arrives at your facility.

Lenovo Support Services

In addition to response time options for hardware parts, repairs, and labor, Lenovo offers a wide array of additional support services to ensure your business is positioned for success and longevity. Our goal is to reduce your capital outlays, mitigate your IT risks, and accelerate your time to productivity.

• Premier Support for Data Centers

  Your direct line to the solution that promises the best, most comprehensive level of support to help you fully unlock the potential of your data center.

• Premier Enhanced Storage Support (PESS)

  Gain all the benefits of Premier Support for Data Centers, adding dedicated storage specialists and resources to elevate your storage support experience to the next level.

• Committed Service Repair (CSR)

  Our commitment to ensuring the fastest, most seamless resolution times for mission-critical systems that require immediate attention to ensure minimal downtime and risk for your business. This service is only available for machines under the Premier 4-Hour Response SLA.

• Multivendor Support Services (MVS)

  Your single point of accountability for resolution support across vast range of leading Server, Storage, and Networking OEMs, allowing you to manage all your supported infrastructure devices seamlessly from a single source.

• Keep Your Drive (KYD)

  Protect sensitive data and maintain compliance with corporate retention and disposal policies to ensure your data is always under your control, regardless of the number of drives that are installed in your Lenovo server.

• Technical Account Manager (TAM)

  Your single point of contact to expedite service requests, provide status updates, and furnish reports to track incidents over time, ensuring smooth operations and optimized performance as your business grows.

• Enterprise Software Support (ESS)

  Gain comprehensive, single-source, and global support for a wide range of server operating systems and Microsoft server applications.

For more information, consult the brochure Lenovo Operational Support Services for Data Centers.

Lenovo Managed Services

Achieve peak efficiency, high security, and minimal disruption with Lenovo's always-on Managed Services. Our real-time monitoring, 24x7 incident response, and problem resolution ensure your infrastructure operates seamlessly. With quarterly health checks for ongoing optimization and innovation, Lenovo's remote active monitoring boosts end-user experience and productivity by keeping your data center's hardware performing at its best.

Lenovo Managed Services provides continuous 24x7 remote monitoring (plus 24x7 call center availability) and proactive management of your data center using state-of-the-art tools, systems, and practices by a team of highly skilled and experienced Lenovo services professionals.

Quarterly reviews check error logs, verify firmware & OS device driver levels, and software as needed. We’ll also maintain records of latest patches, critical updates, and firmware levels, to ensure you systems are providing business value through optimized performance.

Lenovo Sustainability Services

• Asset Recovery Services

  Lenovo Asset Recovery Services (ARS) provides a secure, seamless solution for managing end-of-life IT assets, ensuring data is safely sanitized while contributing to a more circular IT lifecycle. By maximizing the reuse or responsible recycling of devices, ARS helps businesses meet sustainability goals while recovering potential value from their retired equipment. For more information, see the Asset Recovery Services offering page.

• CO2 Offset Services

  Lenovo’s CO2 Offset Services offer a simple and transparent way for businesses to take tangible action on their IT footprint. By integrating CO2 offsets directly into device purchases, customers can easily support verified climate projects and track their contributions, making meaningful progress toward their sustainability goals without added complexity.

• Lenovo Certified Refurbished

  Lenovo Certified Refurbished offers a cost-effective way to support IT circularity without compromising on quality and performance. Each device undergoes rigorous testing and certification, ensuring reliable performance and extending its lifecycle. With Lenovo’s trusted certification, you gain peace of mind while making a more sustainable IT choice.

Lenovo TruScale XaaS is your set of flexible IT services that makes everything easier. Streamline IT procurement, simplify infrastructure and device management, and pay only for what you use – so your business is free to grow and go anywhere.

Lenovo TruScale is  the unified solution that gives you simplified access to:

• The industry’s broadest portfolio – from pocket to cloud – all delivered as a service
• A single-contract framework for full visibility and accountability
• The global scale to rapidly and securely build teams from anywhere
• Flexible fixed and metered pay-as-you-go models with minimal upfront cost
• The growth-driving combination of hardware, software, infrastructure, and solutions – all from one single provider with one point of accountability.

For information about Lenovo TruScale offerings that are available in your region, contact your local Lenovo sales representative or business partner.

The ST250 V2 conforms to the following standards:

• ANSI/UL 62368-1
• IEC 62368-1 (CB Certificate and CB Test Report)
• FCC - Verified to comply with Part 15 of the FCC Rules, Class A
• Canada ICES-003, issue 7, Class A
• CSA C22.2 No. 62368-1
• CISPR 32, Class A, CISPR 35
• Argentina IEC 60950-1
• Japan VCCI, Class A
• Taiwan BSMI CNS13438, Class A; CNS14336-1; Section 5 of CNS15663
• CE, UKCA Mark (EN55032 Class A, EN62368-1, EN55024, EN55035, EN61000-3-2, EN61000-3-3, (EU) 2019/424, and EN50581-1 (RoHS))
• Korea KN32, Class A, KN35
• Russia, Belorussia and Kazakhstan, TP EAC 037/2016 (for RoHS)
• Russia, Belorussia and Kazakhstan, EAC: TP TC 004/2011 (for Safety); TP TC 020/2011 (for EMC)
• Australia/New Zealand AS/NZS CISPR 32, Class A; AS/NZS 62368.1
• UL Green Guard, UL2819
• EPEAT (NSF/ ANSI 426) Bronze
• China CCC certificate, GB17625.1; GB4943.1; GB/T9254
• China CECP certificate, CQC3135
• China CELP certificate, HJ 2507-2011
• Japanese Energy-Saving Act
• Mexico NOM-019
• TUV-GS (EN62368-1, and EK1-ITB2000)
• India BIS 13252 (Part 1)
• Germany GS
• Brazil INMETRO
• South Africa NRCS LOA
• Ukraine UkrCEPRO
• Morocco CMIM Certification (CM)
• EU2019/424 Energy Related Product (ErP Lot9)

The server supports attachment to external drive enclosures using a RAID controller with external ports or a SAS host bus adapter. Adapters supported by the server are listed in the SAS adapters for external storage section.

Note: Information provided in this section is for ordering reference purposes only. For the operating system and adapter support details, refer to the interoperability matrix for a particular storage enclosure that can be found on the Lenovo Data Center Support web site:
http://datacentersupport.lenovo.com