Hardware options installation 110
2.
Retaining the recovery key/password (on page
111
).
3.
Enabling the Trusted Platform Module (on page
112
).
Enabling the TPM requires accessing BIOS/Platform Configuration (RBSU) in HP UEFI System Utilities
(on page
133
).
TPM installation requires the use of drive encryption technology, such as the Microsoft Windows BitLocker
Drive Encryption feature. For more information on BitLocker, see the Microsoft website
(
http://www.microsoft.com
).
CAUTION:
Always observe the guidelines in this document. Failure to follow these guidelines
can cause hardware damage or halt data access.
When installing or replacing a TPM, observe the following guidelines:
•
Do not remove an installed TPM. Once installed, the TPM becomes a permanent part of the system
board.
•
When installing or replacing hardware, HP service providers cannot enable the TPM or the encryption
technology. For security reasons, only the customer can enable these features.
•
When returning a system board for service replacement, do not remove the TPM from the system board.
When requested, HP Service provides a TPM with the spare system board.
•
Any attempt to remove an installed TPM from the system board breaks or disfigures the TPM security
rivet. Upon locating a broken or disfigured rivet on an installed TPM, administrators should consider the
system compromised and take appropriate measures to ensure the integrity of the system data.
•
When using BitLocker, always retain the recovery key/password. The recovery key/password is
required to enter Recovery Mode after BitLocker detects a possible compromise of system integrity.
•
HP is not liable for blocked data access caused by improper TPM use. For operating instructions, see the
encryption technology feature documentation provided by the operating system.
Installing the Trusted Platform Module board
WARNING:
To reduce the risk of personal injury from hot surfaces, allow the drives and the
internal system components to cool before touching them.
1.
Power down the server (on page
20
).
2.
Remove all power:
a.
Disconnect each power cord from the power source.
b.
Disconnect each power cord from the server.
3.
Do one of the following:
o
Extend the server from the rack (on page
20
).
o
Remove the server from the rack (on page
22
).
4.
Remove the access panel (on page
24
).
5.
If an expansion board is installed in the secondary PCI riser location, remove the board.
CAUTION:
Any attempt to remove an installed TPM from the system board breaks or disfigures
the TPM security rivet. Upon locating a broken or disfigured rivet on an installed TPM,
administrators should consider the system compromised and take appropriate measures to ensure
the integrity of the system data.
