HP ProLiant DL20 Gen10 Plus, Maintenance And Service Manual

Page: 202 / 246

HPE HPE Trusted Platform Module 2.0 Trusted Platform Module 2.0 guidelines guidelines
CAUTION: CAUTION:
Always observe the TPM guidelines in this section. Failure to follow these guidelines can cause hardware damage or
halt data access.
If you do not follow procedures for modifying the server and suspending or disabling the TPM in the OS, an OS that
is using TPM might lock all data access. This includes updating system or option firmware, replacing hardware such
as the system board and drives, and modifying TPM OS settings.
Changing the TPM mode after installing an OS might cause problems, including loss of data.
Hewlett Packard Enterprise Hewlett Packard Enterprise SPECIAL REMINDER: SPECIAL REMINDER: Before enabling TPM functionality on this system, you must ensure that your intended
use of TPM complies with relevant local laws, regulations and policies, and approvals or licenses must be obtained if applicable.
When the embedded TPM is enabled:
In UEFI boot mode, the Trusted Platform Module operates in TPM 2.0 mode.
In legacy boot mode, the Trusted Platform Module operation is not supported.
Use the UEFI System Utilities to configure the TPM. From the System Utilities screen, select System Configuration > BIOS/Platform
Configuration (RBSU) > Server Security > Trusted Platform Module options. For more information, see the UEFI user guide:
https://www.hpe.com/support/UEFIGen10-UG-en https://www.hpe.com/support/UEFIGen10-UG-en
When using the Microsoft Windows BitLocker Drive Encryption feature, always retain the recovery key or password. The recovery key
or password is required to enter Recovery Mode after BitLocker detects a possible compromise of system integrity.
HPE is not liable for blocked data access caused by improper TPM use. For operating instructions, see the documentation for the
encryption technology feature provided by the operating system.
HPE Trusted Platform Module 2.0 guidelines 202