Trusted Platform Module
For servers configured with an optional TPM, the following configuration options are available:
•
“TPM Functionality” (page 84)
•
“TPM Visibility” (page 85)
•
“TPM Expansion ROM Measuring” (page 86)
•
“TPM Clear” (page 87)
IMPORTANT:
TPM menus appear only if the TPM kit is installed.
TPM Functionality
This option controls Trusted Platform Module functionality at startup. Options include:
•
Enabled
—Enables the TPM and BIOS secure startup. The TPM is fully functional in this mode.
•
Disabled
(default)—Disables the BIOS secure startup but still allows the TPM to be visible to
the operating system. The TPM functionality is limited, but can respond to most commands in
this mode. Selecting
Disabled
may prevent the server from booting to a TPM-aware operating
system.
CAUTION:
When a TPM is installed and enabled on the server, if the TPM is being used by the
OS, data access is locked if you fail to follow the proper procedures for updating the system or
option firmware, replacing the system board, replacing a hard drive, or modifying OS application
TPM settings.
For information on installing and enabling the TPM module option, see the user documents for your
server model and the Data security in HP ProLiant servers using the Trusted Platform Module and
Microsoft Windows BitLocker Drive Encryption whitepaper:
http://h20000.www2.hp.com/bc/
docs/support/SupportManual/c01681891/c01681891.pdf
.
84
RBSU menu-driven interface (G7 and later servers)