Cisco UCS C890 M5, Instruction Manual

Page: 138 / 191

Contents Page 143
Select Enabled to enable SHA256 PCR Bank support to enhance system security and data
integrity. The options are Enabled and Disabled.
Pending Operation
Use this feature to schedule a TPM-related operation to be performed by a security (TPM)
device at the next system boot to enhance system data integrity. The options are None and
TPM Clear.
Note : Your system will reboot to carry out a pending TPM operation.
Platform Hierarchy (for TPM Version 2.0 and above)
Select Enabled for TPM Platform Hierarchy support which will allow the manufacturer to utilize
the cryptographic algorithm to define a constant key or a fixed set of keys to be used for initial
system boot. These early boot codes are shipped with the platform and are included in the list
of "public keys". During system boot, the platform firmware uses the trusted public keys to
verify a digital signature in an attempt to manage and control the security of the platform
firmware used in a host system via a TPM device. The options are Enabled and Disabled.
Storage Hierarchy
Select Enabled for TPM Storage Hierarchy support that is intended to be used for non-privacy-
sensitive operations by the platform owner such as an IT professional or the end user. Storage
Hierarchy has an owner policy and an authorization value, both of which can be set and are
held constant (-rarely changed) through reboots. This hierarchy can be cleared or changed
independently of the other hierarchies. The options are Enabled and Disabled.