Northern Micro Spirit Q370-AS, User Manual

Page: 106 / 123

TPM
TPM (Trusted Platform Module) is an integrated chip on the motherboard that stores keys,
passwords and digital certificates. It is specifically designed to enhance platform security
above-and-beyond the capabilities of today’s software by providing a protected space for
key operations and other security critical tasks. The information stored is typically much
more resistant to attacks; both software and theft. TPM protects encryption and signature
keys at their most vulnerable stages i.e operations when the keys are being used
unencrypted in plain-text form. Access to data could be denied if the boot sequence is not as
expected making email, secure web access and data protection much more secure.
Systems with TPMs offer improved,
hardware -based security in numerous applications, such
as file and folder encryption, local password management, S-MIME e-mail, VPN and PKI
authentication and wireless authentication for 802.1x.
How do TPMs compare with smart cards or biometrics?
They are complementary to the TPM , which is considered a fixed token that can be
used to enhance user authentication, data, communications, and/or platform security.
A smart card is a portable token traditionally used to provide more secure
authentication for a specific user across multiple systems, while biometrics are
providing that functionality in an increasing number of systems. Both technologies can
have a role in the design of more secure computing environments.
Can the Trusted Platform Module control what software runs?
No. There is no ability to do this. The subsystem can only act as a 'slave' to higher
level services and applications by storing and reporting pre-runtime configuration
information. Other applications determine what is done with this information.
How does Microsoft’s BitLocker technology relate to the TPM
Microsoft BitLocker™ Drive Encryption is designed to make use of a Trusted Platform
Module ( TPM ) 1.2 to protect critical system files and user data and to help ensure that
a computer running Windows Vista has not been tampered with while the system was
offline.
Is the TPM required for BitLocker?
For BitLocker™ to make use of a TPM , it must be a version 1.2. While it is possible to
use BitLocker™ without a TPM by storing the keying material on a USB flash drive, this
is not the preferred customer configuration, nor is it expected to be typical usage due
to the cost and manageability challenges associated with this mode of use.