Colfax CX2265i-OPT-S24-XR7 2U Rackmount Server

Hardware Features

• 2x 2nd Gen Intel® Xeon® Scalable Processors
• Intel C624 Chipset
• 24x DIMM Slots*
• 24x 2.5" Hot-Swap Drive Bays
• 1x M.2 SSD
• Optional 2x Rear Hot-Swap 2.5" Drive Bays
• Intel® RES3TV360 SAS 3.0 12 Gb/s Expander
• Support for 2 Riser Cards:
  - 2x 3 PCIe* slot riser cards (Each riser supports up to two full height full length add-in cards and one full height ½ length add-in card
• Integrated 2x 10GBase-T Ports
• 1x 1300W AC 80+ Platinum Efficiency Power Supply (Optional 2nd Power Supply for Redundancy)
• 6x 60mm Hot-Swap Managed Fans
• Integrated Video Controller
• Integrated Baseboard Management Controller, IPMI 2.0 Compliant
• Optional Intel® Remote Management Module 4 Lite
• Optional Intel® OCP Module
• Optional Intel® RAID Module
• Optional Intel® Trusted Platform Module 2.0

* Memory Support and Population Guidelines

The server supports up to 24 DDR4 DIMMs, 12 per processor. Each installed processor supports six memory channels via two integrated memory controllers (IMC). On the server board, memory channels are assigned an identifier letter A through F, with each memory channel supporting two DIMM slots.

Intel® Optane™ persistent memory module supports the following operating modes:

• Memory Mode - In Memory Mode (MM), Intel® Optane™ persistent memory works as the main large volatile (non-persistent) system memory. While in Memory Mode, all available traditional DRAM within the same memory controller functions as the write-back L4 cache for Intel® Optane™ persistent memory module. This lowers the cost of total system memory capacity versus only traditional DRAM while maintaining near-DRAM performance.
• App Direct mode - App Direct (AD) mode allows Intel® Optane™ persistent memory module to work as persistent memory, maintaining data integrity while power is lost for applications while sustaining near-DRAM performance. While in App Direct mode, DRAM operates as normal system memory and Intel® Optane™ persistent memory module functions as application storage.
• Mixed mode - Mixed mode allows partial use of Intel® Optane™ persistent memory module’s capacity to work as a large pool of volatile system memory, and for the remaining capacity to work as persistent memory for applications with near-DRAM performance. The capacity dedicated to volatile system memory must meet the Memory Mode population criteria, and any remaining capacity will be available as persistent memory for application storage and must be supported by the OS, driver, and application.

Riser Cards

The system includes support for 2 riser cards. Supported riser cards include:

2x Three PCIe* Slot Riser Cards

Each riser card assembly has support for up to two full height full length add-in cards (top and middle slots) and one full height ½ length add-in card (bottom slot).

SAS Expander

The system includes support for 1 SAS 3.0 12 Gb/s Expander:

• Featuring 6Gbps data aggregation for 12Gbps data transfer with 6Gb/s devices
• Internal mount mid-plane form factor
• 36 internal ports supporting point-to-point 12, 6, and 3 Gb/s data transfer rates
• RA 4-pin power connector
• HD Mini-SAS 8643 Connectors

Optional Features

Rack Mount Kit Options

• 1U/2U Enhanced Value Rail Kit (AXXELVRAIL):
  - Adjustment within 609.6mm~765mm to fit difference depth rack
  - 424.2mm maximum travel length
  - 2/3 extension from rack
  - 130 lbs. (59 Kgs) max support weight
  - Tool-less chassis attach
  - Tools required to attach to rails to rack
  - No Cable Management Arm support
• 2U Premium Quality Rails with no CMA Support (AXXSHRTRAIL):
  - Travel distance 788mm
  - Bracket adjustment from 594.8mm to 813mm
  - Tool-less installation
  - Supports up to 45Kg
  - Full extension from rack
• 2U Premium Quality Rails with CMA Support (AXXFULLRAIL):
  - Travel distance 800mm
  - Tool-less installation
  - Full extension from rack
  - Cable Management Arm (AXXCMA2) support
• 1U/2U 2-Post Fixed Mount Bracket Kit (AXX2POSTBRCKT):
  - 1U and 2U compatible
  - Tools required to attach components to rack

OCP Expansion Module

The system includes support for a number of optional OCP modules that install onto proprietary connectors on the server board leaving all available PCIe* add-in cards slots available for other add-in card options. Supported OCP modules include:

• 2-port 10Gb RJ45 Module
• 2-port SFP+ Module

On-Board SW SATA RAID Options

The server board includes support for two embedded SW SATA RAID options:

• Intel® Rapid Storage Technology (RSTe) 5.0
  - Supported RAID levels include 0, 1, 5, and 10
• Intel® Embedded Server RAID Technology 2 (ESRT2) 1.6
  - Based on LSI* MegaRAID Software Stack
  - Software RAID with system providing memory and CPU utilization
  - Supported RAID levels include 0, 1, 10 (RAID 5 with optional ESRT2 SATA RAID 5 Upgrade Key)

Integrated RAID Module

The system includes support for optional Intel® Integrated RAID mezzanine modules that can be installed onto a high density 80-pin connector on the server board:

• Intel® Integrated RAID Module RMSP3CD080F
  - Mezzanine Form Factor HW RAID Module
  - Full Featured Tri-Mode RAID Controller
  - 8 Internal SAS / SATA ports / 2 NVMe
  - 2 Internal Mini-SAS HD SFF8643 connectors
  - Avago* SAS3508 ROC with 4GB DDR4 2133 MT/s
  - RAID Levels 0, 1, 10, 5, 50, 6, 60 and JBOD
  - Embedded 4GB DDR4 Cache Memory
  - Supports Maintenance Free Backup Unit (AXXRMFBU7)
• Supports the following Intel® RAID Accessory Options:
  - Intel® RAID Drive Encryption Management (AXXRPFKDE2)

• Intel® Integrated RAID Module RMSP3HD080E
  - Mezzanine Form Factor HW RAID Module
  - Entry Level Tri-Mode RAID Controller
  - 8 Internal SAS / SATA ports / 2 NVMe
  - 2 Internal Mini-SAS HD SFF8643 connectors
  - Avago* SAS3408 IOC
  - RAID Levels 0, 1, 10, 5 and JBOD

Intel® Trusted Platform Module (TPM) 2.0

A TPM is a hardware-based security device that addresses the growing concern on boot process integrity and offers better data protection. TPM protects the system start-up process by ensuring it is tamper-free before releasing system control to the operating system. A TPM device provides secured storage to store data, such as security keys and passwords. In addition, a TPM device has encryption and hash functions.

AXXTPMENC8 implements TPM as per TPM PC Client specifications revision 2.0 by the Trusted Computing Group (TCG)

Intel, the Intel logo, Xeon, and Xeon Inside are trademarks or registered trademarks of Intel Corporation in the U.S. and other countries.

Remote Management Module

Overview

The integrated BMC has support for basic and advanced server management features. Basic management features are available by default. Advanced management features are enabled with the addition of an optionally installed Remote Management Module 4 Lite key (AXXRMM4LITE2).

When the BMC FW initializes, it attempts to access the Intel® RMM4 Lite. If the attempt to access Intel® RMM4 Lite is successful, then the BMC activates the Advanced features.

The following table identifies both Basic and Advanced server management features.

Dedicated Management Port

The server board includes a dedicated 1GbE RJ45 Management Port. The management port is active with or without the RMM4 Lite key installed.

Embedded Web Server

BMC Base manageability provides an embedded web server and an OEM-customizable web GUI which exposes the manageability features of the BMC base feature set. It is supported over all on-board NICs that have management connectivity to the BMC as well as an optional dedicated add-in management NIC. At least two concurrent web sessions from up to two different users is supported. The embedded web user interface shall support the following client web browsers:

• Microsoft Internet Explorer*
• Mozilla Firefox*

The embedded web user interface supports strong security (authentication, encryption, and firewall support) since it enables remote server configuration and control. The user interface presented by the embedded web user interface, shall authenticate the user before allowing a web session to be initiated. Encryption using 128-bit SSL is supported. User authentication is based on user id and password.

The GUI presented by the embedded web server authenticates the user before allowing a web session to be initiated. It presents all functions to all users but grays-out those functions that the user does not have privilege to execute. For example, if a user does not have privilege to power control, then the item shall be displayed in grey-out font in that user’s UI display. The web GUI also provides a launch point for some of the advanced features, such as KVM and media redirection. These features are grayed out in the GUI unless the system has been updated to support these advanced features. The embedded web server only displays US English or Chinese language output.

Additional features supported by the web GUI includes:

• Presents all the Basic features to the users
• Power on/off/reset the server and view current power state
• Displays BIOS, BMC, ME and SDR version information
• Display overall system health
• Configuration of various IPMI over LAN parameters for both IPV4 and IPV6
• Configuration of alerting (SNMP and SMTP)
• Display system asset information for the product, board, and chassis
• Display of BMC-owned sensors (name, status, current reading, enabled thresholds), including colorcode status of sensors
• Provides ability to filter sensors based on sensor type (Voltage, Temperature, Fan and Power supply related)
• Automatic refresh of sensor data with a configurable refresh rate
• On-line help
• Display/clear SEL (display is in easily understandable human readable format)
• Supports major industry-standard browsers (Microsoft Internet Explorer* and Mozilla Firefox*)
• TAutomatic time-out of the GUI session after a user-configurable inactivity period (30 minutes, by default)
• Embedded Platform Debug feature - Allow the user to initiate a "debug dump" to a file that can be sent to Intel for debug purposes
• A Virtual Front Panel provides the same functionality as the local front panel. The displayed LEDs match the current state of the local panel LEDs. The displayed buttons (for example, power button) can be used in the same manner as the local buttons
• Display of ME sensor data. Only sensors that have associated SDRs loaded will be displayed
• Ability to save the SEL to a file
• Ability to force HTTPS connectivity for greater security. This is provided through a configuration option in the UI
• Display of processor and memory information as is available over IPMI over LAN
• Ability to get and set Node Manager (NM) power policies
• Display of power consumed by the server
• Ability to view and configure VLAN settings
• Warn user the reconfiguration of IP address will cause disconnect
• Capability to block logins for a period of time after several consecutive failed login attempts. The lock-out period and the number of failed logins that initiates the lock-out period are configurable by the user
• Server Power Control – Ability to force into Setup on a reset
• System POST results – The web server provides the system’s Power-On Self Test (POST) sequence for the previous two boot cycles, including timestamps. The timestamps may be viewed in relative to the start of POST or the previous POST code
• Customizable ports – The web server provides the ability to customize the port numbers used for SMASH, http, https, KVM, secure KVM, remote media, and secure remote media

Advanced Management Feature Support (RMM4 Lite)

The integrated baseboard management controller has support for advanced management features which are enabled when an optional Intel® Remote Management Module 4 Lite (RMM4 Lite) is installed. The Intel RMM4 add-on offers convenient, remote KVM access and control through LAN and internet. It captures, digitizes, and compresses video and transmits it with keyboard and mouse signals to and from a remote computer. Remote access and control software runs in the integrated baseboard management controller, utilizing expanded capabilities enabled by the Intel RMM4 (AXXRMM4LITE2) hardware.

Key Features of the RMM4 add-on are:

• KVM redirection from either the dedicated management NIC or the server board NICs used for management traffic; upto to two KVM sessions
• Media Redirection – The media redirection feature is intended to allow system administrators or users to mount a remote IDE or USB CDROM, floppy drive, or a USB flash disk as a remote device to the server. Once mounted, the remote device appears just like a local device to the server allowing system administrators or users to install software (including operating systems), copy files, update BIOS, or boot the server from this device
• KVM – Automatically senses video resolution for best possible screen capture, high performance mouse tracking and synchronization. It allows remote viewing and configuration in pre-boot POST and BIOS setup

Keyboard, Video, Mouse (KVM) Redirection
The BMC firmware supports keyboard, video, and mouse redirection (KVM) over LAN. This feature is available remotely from the embedded web server as a Java applet. This feature is only enabled when the Intel® RMM4 lite is present. The client system must have a Java Runtime Environment (JRE) version 6.0 or later to run the KVM or media redirection applets.

The BMC supports an embedded KVM application (Remote Console) that can be launched from the embedded web server from a remote console. USB1.1 or USB 2.0 based mouse and keyboard redirection are supported. It is also possible to use the KVM-redirection (KVM-r) session concurrently with media-redirection (media-r). This feature allows a user to interactively use the keyboard, video, and mouse (KVM) functions of the remote server as if the user were physically at the managed server. KVM redirection console supports the following keyboard layouts: English, Dutch, French, German, Italian, Russian, and Spanish.

KVM redirection includes a "soft keyboard" function. The "soft keyboard" is used to simulate an entire keyboard that is connected to the remote system. The "soft keyboard" functionality supports the following layouts: English, Dutch, French, German, Italian, Russian, and Spanish.

The KVM-redirection feature automatically senses video resolution for best possible screen capture and provides high-performance mouse tracking and synchronization. It allows remote viewing and configuration in pre-boot POST and BIOS setup, once BIOS has initialized video.

Other attributes of this feature include:

• Encryption of the redirected screen, keyboard, and mouse
• Compression of the redirected screen
• Ability to select a mouse configuration based on the OS type
• Supports user definable keyboard macros

KVM redirection feature supports the following resolutions and refresh rates:

• 640x480 at 60Hz, 72Hz, 75Hz, 85Hz
• 800x600 at 60Hz, 72Hz, 75Hz, 85Hz
• 1024x768 at 60Hx, 72Hz, 75Hz, 85Hz
• 1152x864 at 75Hz
• 1280x800 at 60Hz
• 1280x1024 at 60Hz
• 1440x900 at 60Hz
• 1600x1200 at 60Hz

Remote Console
The Remote Console is the redirected screen, keyboard and mouse of the remote host system. To use the Remote Console window of your managed host system, the browser must include a Java* Runtime Environment plug-in. If the browser has no Java support, such as with a small handheld device, the user can maintain the remote host system using the administration forms displayed by the browser.

The Remote Console window is a Java Applet that establishes TCP connections to the BMC. The protocol that is run over these connections is a unique KVM protocol and not HTTP or HTTPS. This protocol uses ports #7578 for KVM, #5120 for CDROM media redirection, and #5123 for Floppy/USB media redirection. When encryption is enabled, the protocol uses ports #7582 for KVM, #5124 for CDROM media redirection, and #5127 for Floppy/USB media redirection. The local network environment must permit these connections to be made, that is, the firewall and, in case of a private internal network, the NAT (Network Address Translation) settings have to be configured accordingly.

Performance
The remote display accurately represents the local display. The feature adapts to changes to the video resolution of the local display and continues to work smoothly when the system transitions from graphics to text or vice-versa. The responsiveness may be slightly delayed depending on the bandwidth and latency of the network.

Enabling KVM and/or media encryption will degrade performance. Enabling video compression provides the fastest response while disabling compression provides better video quality.

For the best possible KVM performance, a 2Mb/sec link or higher is recommended.

The redirection of KVM over IP is performed in parallel with the local KVM without affecting the local KVM operation.

Security
The KVM redirection feature supports multiple encryption algorithms, including RC4 and AES. The actual algorithm that is used is negotiated with the client based on the client’s capabilities.

Availability
The remote KVM session is available even when the server is powered-off (in stand-by mode). No re-start of the remote KVM session shall be required during a server reset or power on/off. A BMC reset (for example, due to an BMC Watchdog initiated reset or BMC reset after BMC FW update) will require the session to be reestablished.

KVM sessions persist across system reset, but not across an AC power loss.

Usage
As the server is powered up, the remote KVM session displays the complete BIOS boot process. The user is able interact with BIOS setup, change and save settings as well as enter and interact with option ROM configuration screens.

At least two concurrent remote KVM sessions are supported. It is possible for at least two different users to connect to same server and start remote KVM sessions.

Force-enter BIOS Setup
KVM redirection can present an option to force-enter BIOS Setup. This enables the system to enter F2 setup while booting which is often missed by the time the remote console redirects the video.

Media Redirection
The embedded web server provides a Java applet to enable remote media redirection. This may be used in conjunction with the remote KVM feature, or as a standalone applet.

The media redirection feature is intended to allow system administrators or users to mount a remote IDE or USB CD-ROM, floppy drive, or a USB flash disk as a remote device to the server. Once mounted, the remote device appears just like a local device to the server, allowing system administrators or users to install software (including operating systems), copy files, update BIOS, and so on, or boot the server from this device.

The following capabilities are supported:

• The operation of remotely mounted devices is independent of the local devices on the server. Both remote and local devices are useable in parallel.
• Either IDE (CD-ROM, floppy) or USB devices can be mounted as a remote device to the server.
• It is possible to boot all supported operating systems from the remotely mounted device and to boot from disk IMAGE (*.IMG) and CD-ROM or DVD-ROM ISO files. See the Tested/supported Operating System List for more information.
• Media redirection supports redirection for both a virtual CD device and a virtual Floppy/USB device concurrently. The CD device may be either a local CD drive or else an ISO image file; the Floppy/USB device may be a local Floppy drive, a local USB device, or a disk image file.
• The media redirection feature supports multiple encryption algorithms, including RC4 and AES. The actual algorithm that is used is negotiated with the client based on the client’s capabilities.
• A remote media session is maintained even when the server is powered-off (in standby mode). No restart of the remote media session is required during a server reset or power on/off. An BMC reset (for example, due to an BMC reset after BMC FW update) will require the session to be re-established
• The mounted device is visible to (and useable by) managed system’s OS and BIOS in both pre-boot and post-boot states.
• The mounted device shows up in the BIOS boot order and it is possible to change the BIOS boot order to boot from this remote device.
• It is possible to install an operating system on a bare metal server (no OS present) using the remotely mounted device. This may also require the use of KVM-r to configure the OS during install.

USB storage devices will appear as floppy disks over media redirection. This allows for the installation of device drivers during OS installation.

If either a virtual IDE or virtual floppy device is remotely attached during system boot, both the virtual IDE and virtual floppy are presented as bootable devices. It is not possible to present only a single-mounted device type to the system BIOS.

Availability
The default inactivity timeout is 30 minutes and is not user-configurable. Media redirection sessions persist across system reset but not across an AC power loss or BMC reset.

Network Port Usage
The KVM and media redirection features use the following ports:

• 5120 – CD Redirection
• 5123 – FD Redirection
• 5124 – CD Redirection (Secure)
• 5127 – FD Redirection (Secure)
• 7578 – Video Redirection
• 7582 – Video Redirection (Secure)

Technical Specifications

CPU	• Two LGA3647-0 (Socket P) processor sockets • Support for 2nd Gen Intel® Xeon® Scalable Processors • Intel® Omni-Path Fabric Support • Supports Max TDP 165W
Memory	• 24x DIMM slots (12/CPU) • Supports DDR4 RDIMM/LRDIMM, Up to 2933 MT/s, 1.2V • DDR-compatible Intel® Optane™ Persistent Memory Module, Up to 2666 MT/s, 1.2V Note: The maximum memory speed supported is dependent on the installed processor SKU and population configuration. Note: Intel® Optane™ Persistent Memory Module memory is only supported with select 2nd Gen Intel® Xeon® Scalable Processors
Chipset	• Intel® C624
Onboard SATA Support	• 12 x SATA 6Gbps ports - Two single port 7-pin SATA connectors - Two M.2 connectors – SATA / PCIe* - Two 4-port mini-SAS HD (SFF-8643) connectors • Embedded SATA Software RAID - Intel® Rapid Storage RAID Technology (RSTe) 5.0 - Intel® Embedded Server RAID Technology 2 (ESRT2) 1.60 with optional RAID 5 key support
Riser Support	• Support for two riser cards: - Riser #1 – PCIe* 3.0 x24 - up to 3 PCIe slots - Riser #2 – PCIe* 3.0 x24 - up to 3 PCIe slots • With two riser cards installed, up to 6 possible add-in cards can be supported: - Full Height / Half Length + 2 Full Height / Half Length add-in cards via Risers #1 and #2
LAN	• Dual 10GBase-T ports • One dedicated 1GbE management port
USB	• Three external USB 3.0 ports • One internal Type-A USB 2.0 port • One internal 20-pin connector for optional 2x USB 3.0 port Front Panel support • One Internal 10-pin connector for optional 2x USB 2.0 port Front Panel support
Video	• Integrated 2D Video Controller • 16MB of DDR4 Video Memory • One DB-15 External Connector • One 14-Pin Internal connector for optional Front Panel Video support
Server Management	• Integrated Baseboard Management Controller, IPMI 2.0 compliant • Support for Intel® Server Management Software • One Dedicated RJ45 Management Port • One 2x4 pin header for optional Intel® Remote Management Module 4 Lite (Intel® RMM4 Lite2) with support for Remote KVM
System Fans	• Six managed 60mm hot-swap system fans • Integrated fans included with each installed power supply module
Storage Bay	• 24x 2.5" Hot Swap Drive Bays • 2x 2.5" Rear Hot Swap Drive Bays
Power Supply	• 1 x 1300W AC power supply • Optional 2nd power supply for redundancy • 80 Plus Platinum
Trusted Platform Module (TPM)	• Optional Intel® Trusted Platform Module 2.0
Dimensions (HxWxL)	• 2U Rackmount • 3.5" x 17.28" x 28" • 89mm x 439mm x 712mm

Block Diagram

Images