GPU authenticity

, ,

Hello,

New to these forums, so apologies in advance if I picked the wrong section.

I got a couple of second-hand H100 PCIe 80GB cards, and it confused me to discover that their PCI device ID is 0x2330, while, according to documentation, it should be 0x2331 instead:

0x2330 is the correct ID for the SXM5 version of the card.

Furthermore, both cards feature a “warranty void if removed” sticker sealing one of the screws. TBH, I haven’t seen H100’s in hundreds, but judging by what I’ve seen, including some pics and videos out there on the net, there should be no such stickers on a factory-sealed card.

Does all that mean counterfeit or refurbished? In all other respects the cards look fine, no signs of having been somehow tampered with.

I can only talk to using CC to authenticate the chip. In particular you would need

  1. To set the GPU into CC mode.
  2. An Intel TDX or AMD SEV CPU running in CC mode.
  3. To install the hypervisor and guest.
  4. Run GPU authentication and attestation (GitHub - NVIDIA/nvtrust: Ancillary open source software to support confidential computing on NVIDIA GPUs)

If step 4 is successful then you know (to a degree of certainty) you have a real NVIDIA H100 chip. However if someone de-solders a SXM5 chip and puts it in a PCIE card and somehow gets that to work, step 4 would still be successful.