Spirit P8Q67-M-DO, Руководство пользователя, Страница: 152 / 176

Spirit P8Q67-M-DO (Eng) Rev 1
140
Systems with TPMs offer improved, hardware -based security in numerous applications, such
as file and folder encryption, local password management, S-MIME e-mail, VPN and PKI
authentication and wireless authentication for 802.1x.
How do TPMs compare with smart cards or biometrics?
They are complementary to the TPM, which is considered a fixed token that can be used
to enhance user authentication, data, communications, and/or platform security. A
smart card is a portable token traditionally used to provide more secure authentication
for a specific user across multiple systems, while biometrics are providing that
functionality in an increasing number of systems. Both technologies can have a role in
the design of more secure computing environments.
Can the Trusted Platform Module control what software runs?
No. There is no ability to do this. The subsystem can only act as a 'slave' to higher level
services and applications by storing and reporting pre-runtime configuration information.
Other applications determine what is done with this information.
How does Microsoft’s BitLocker technology relate to the TPM
Microsoft BitLocker™ Drive Encryption is designed to make use of a Trusted Platform
Module (TPM) 1.2 to protect critical system files and user data and to help ensure that a
computer running Windows Vista has not been tampered with while the system was
offline.
Is the TPM required for BitLocker?
For BitLocker™ to make use of a TPM, it must be a version 1.2. While it is possible to
use BitLocker™ without a TPM by storing the keying material on a USB flash drive, this is
not the preferred customer configuration, nor is it expected to be typical usage due to
the cost and manageability challenges associated with this mode of use.
Warning of Potential Data Loss
Take precautions to mitigate the chance of data loss. Data encrypted by any program
utilizing the Trusted Platform Module ( TPM ) may become inaccessible or unrecoverable if
any of the following occurs:

Lost Password: Loss of any of the passwords associated with the TPM will render
encrypted data inaccessible. No password recovery is available.

Hard Drive Failure: In the event of a failure of a hard disk (or other storage media)
that contains encrypted data, an image of the hard disk (or other storage media)
must be restored from backup before access to encrypted data may become
available. The owner/user should backup the system hard disk on a regular basis.

Motherboard Failure: In the event of a platform failure and/or replacement of the
motherboard, recovery procedures may allow migratable keys to be recovered and
may restore access to encrypted data. All non-migratable keys and their associated
data will be lost.

Loss of Trusted Platform Module Ownership: Trusted Platform Module
Ownership/contents may be cleared (via a BIOS switch) to allow for the transfer of a
system to a new owner. If TPM ownership is cleared, either intentionally or in error,
recovery procedures may allow the migratable keys to be recovered and may restore
access to encrypted data.