Quick Reference Guide

ManualsBrandsIntel ManualsOtherIntel Desktop Board DQ45EK

Trusted Platform Module (TPM)

System builders/integrators should pass this Guide on to

the system owner to assist them in enabling and

activating the TPM.

Warning of Potential Data Loss....................................... 3

Trusted Platform Module (TPM)....................................... 4

System Requirements....................................................... 4

Security Precautions......................................................... 4

Password Procedures...........................................................................5

Emergency Recovery File Back Up Procedures..................................5

Hard Drive Image Backup Procedures ................................................6

Clear Text Backup (Optional) .............................................................6

Trusted Platform Module Ownership .............................. 6

Enabling the Trusted Platform Module........................... 6

Assuming Trusted Platform Module Ownership ........... 7

Recovery Procedures ....................................................... 8

How to recover from a hard drive failure ............................................8

How to recover from a desktop board or TPM failure ........................8

Clearing Trusted Platform Module Ownership ............. 10

Support Links ................................................................... 10

C74094-001

Summary of content (10 pages)

PAGE 1
Trusted Platform Module (TPM) Quick Reference Guide System builders/integrators should pass this Guide on to the system owner to assist them in enabling and activating the TPM. Warning of Potential Data Loss ....................................... 3 Trusted Platform Module (TPM)....................................... 4 System Requirements....................................................... 4 Security Precautions......................................................... 4 Password Procedures ..............
PAGE 2
INFORMATION IN THIS DOCUMENT IS PROVIDED IN CONNECTION WITH INTEL® PRODUCTS. NO LICENSE, EXPRESS OR IMPLIED, BY ESTOPPEL OR OTHERWISE, TO ANY INTELLECTUAL PROPERTY RIGHTS IS GRANTED BY THIS DOCUMENT.
PAGE 3
Warning of Potential Data Loss IMPORTANT USER INFORMATION. READ AND FOLLOW THESE INSTRUCTIONS PRIOR TO TRUSTED PLATFORM MODULE INITIALIZATION. System integrators, owners, and end users must take precautions to mitigate the chance of data loss. Data encrypted by any program utilizing the Trusted Platform Module (TPM) may become inaccessible or unrecoverable if any of the following occurs: • Lost Password: Loss of any of the passwords associated with the TPM will render encrypted data inaccessible.
PAGE 4
Trusted Platform Module (TPM) The Trusted Platform Module is a component on the desktop board that is specifically designed to enhance platform security above-and-beyond the capabilities of today’s software by providing a protected space for key operations and other security critical tasks. Using both hardware and software, the TPM protects encryption and signature keys at their most vulnerable stages—operations when the keys are being used unencrypted in plain-text form.
PAGE 5
migratable key is that they can be used on one and only one TPM. In the event of a system or TPM failure, all non-migratable keys and the data associated with them will be inaccessible and unrecoverable. The following precautions and procedures may assist in recovering from any of the previously listed situations. Failure to implement these security precautions and procedures may result in unrecoverable data loss.
PAGE 6
Hard Drive Image Backup Procedures To allow for emergency recovery from a hard drive failure, frequent images of the hard drive should be created and stored in a secure location. In the event of a hard drive failure, the latest image can be restored to a new hard drive and access to the encrypted data may be re-established. ✏ NOTE All encrypted and unencrypted data that was added after the last image was created will be lost.
PAGE 7
Assuming Trusted Platform Module Ownership Once the TPM has been enabled, ownership must be assumed by using the Infineon Security Platform Software. The owner/end user should follow the steps listed below to take ownership of the TPM: 1. Start the system. 2. Launch the Infineon Security Platform Initialization Wizard. 3. Create Owner password (before creating any password, review the Password Recommendations made earlier in this document). 4.
PAGE 8
16. Create and document the password to protect the key archive. 17. Provide the TPM Owner password to allow the Key Transfer Manager to create the archive and restoration key files. 18. Upon completing the configuration of the Key Transfer Manager, it will place an icon in the task bar and automatically back up all new and updated keys associated with the EMBASSY Trust Suite.
PAGE 9
This recovery procedure only restores the migratable keys from the previously created Recovery Archives. 1. 2. 3. Replace the desktop board with the same model as the failed board. Start the original operating system or restore the original hard drive image. Start the Infineon Security Platform Initialization Wizard and check the “I want to restore the existing Security Platform” box. 4.
PAGE 10
Clearing Trusted Platform Module Ownership WARNING Disconnect the desktop board's power supply from its AC power source before you connect or disconnect cables, or install or remove any board components. Failure to do this can result in personal injury or equipment damage. Some circuitry on the desktop board can continue to operate even though the front panel power switch is off. CAUTION DATA ENCRYPTED BY ANY PROGRAM UTILIZING THE TPM WILL BECOME INACCESSIBLE IF TPM OWNERSHIP IS CLEARED.