Trusted Platform Module
The Trusted Platform Module (TPM) is a dedicated microprocessor designed to secure hardware by integrating
cryptographic keys into devices. Software can use a TPM to authenticate hardware devices.
Because each TPM chip contains a unique and secret RSA key embedded during the TPM's manufacture, the TPM is
capable of performing platform authentication.
The TPM must be replaced only while installing a new system board.
Upgrading the Trusted Platform Module
Before you begin
l
Follow all safety guidelines.
l
Ensure that your operating system supports the version of the TPM being installed.
l
Ensure that you download and install the latest BIOS firmware on your system.
l
Ensure that the BIOS is configured to enable UEFI boot mode.
About this task
CAUTION
If you are using the Trusted Platform Module (TPM) with an encryption key, you may be prompted to
create a recovery key during program or System Setup. Ensure that you create and safely store this recovery key.
If you replace this system board, you must supply the recovery key when you restart your system or program
before you can access the encrypted data on your hard drives.
CAUTION
After the TPM plug-in module is installed, it is cryptographically bound to that specific system board.
Any attempt to remove an installed TPM plug-in module breaks the cryptographic binding, the removed TPM
cannot be reinstalled or installed on another system board.
Initialize the TPM for BitLocker users
Procedure
1.
Initialize the TPM.
https://technet.microsoft.com/en-us/library/cc753140.aspx
.
The TPM Status changes to Enabled, Activated.
Initialize the TPM 1.2 for TXT users
Procedure
1.
While booting the system, press F2 to enter System Setup.
2.
In the System Setup Main Menu screen, click System BIOS
>
System Security Settings.
3.
From the TPM Security option, select On with Pre-boot Measurements.
4.
From the TPM Command option, select Activate.
5.
Save the settings.
6.
Restart the system.
7.
Enter System Setup again.
8.
On the System Setup Main Menu screen, click System BIOS
>
System Security Settings.
9.
From the Intel TXT option, select On.
Reference material
42
R840xd Owner's Guide
