Penguin Computing Relion 1900e, Technical Manual

Page: 70 / 174

Relion 1900e/2900e Manual
55 Revision 1.3
6.1.4 Front Panel Lockout
If enabled in BIOS setup, this option disables the following front panel features:
•
The OFF function of the Power button
• System Reset button
• NMI Diagnostic Interrupt button
If [Enabled] is selected, system power off and reset must be controlled via a system management interface.
6.2 Trusted Platform Module (TPM) Support
The server board has the option to support a Trusted Platform Module (TPM) which plugs into a high density
14-pin connector labeled “TPM”.
A TPM is a hardware-based security device that addresses the growing concern on boot process integrity
and offers better data protection. TPM protects the system start-up process by ensuring it is tamper-free
before releasing system control to the operating system. A TPM device provides secured storage to store
data, such as security keys and passwords. In addition, a TPM device has encryption and hash functions. The
server board implements TPM as per TPM PC Client specifications revision 1.2 and 2.0 by the Trusted
Computing Group (TCG).
A TPM device is secured from external software attacks and physical theft. A pre-boot environment, such as
the BIOS and operating system loader, uses the TPM to collect and store unique measurements from
multiple factors within the boot process to create a system fingerprint. This unique fingerprint remains the
same unless the pre-boot environment is tampered with. Therefore, it is used to compare to future
measurements to verify the integrity of the boot process.
After the system BIOS completes the measurement of its boot process, it hands off control to the operating
system loader and in turn to the operating system. If the operating system is TPM-enabled, it compares the
BIOS TPM measurements to those of previous boots to make sure the system was not tampered with before
continuing the operating system boot process. Once the operating system is in operation, it optionally uses
TPM to provide additional system and data security.