Quick Reference Guide

ManualsBrandsIntel ManualsOtherIntel Desktop Board DQ45EK

Trusted Platform Module (TPM)

System builders/integrators should give this Guide to

the system owners to assist them in enabling and

activating the Trusted Platform Module.

Trusted Platform Module (TPM) Quick Reference

Guide........................................................1

Warning of Potential Data Loss..........................3

Trusted Platform Module (TPM) .........................4

System Requirements ........................................4

Security Precautions ..........................................4

Password Procedures............................................. 5

Emergency Recovery File Backup Procedures............. 6

Hard Drive Image Backup Procedures....................... 6

Clear Text Backup (Optional).................................. 6

Trusted Platform Module Ownership..................7

Trusted Platform Module Software Installation..7

Enabling the Trusted Platform Module ...............7

Assuming Trusted Platform Module Ownership..8

Recovery Procedures .........................................9

How to Recover from a Hard Drive Failure ................ 9

How to Recover from a Desktop Board or TPM Failure. 9

Clearing Trusted Platform Module Ownership ...10

Support Links....................................................11

Summary of content (12 pages)

PAGE 1
Trusted Platform Module (TPM) Quick Reference Guide System builders/integrators should give this Guide to the system owners to assist them in enabling and activating the Trusted Platform Module. Trusted Platform Module (TPM) Quick Reference Guide........................................................1 Warning of Potential Data Loss ..........................3 Trusted Platform Module (TPM) .........................4 System Requirements ........................................4 Security Precautions ........
PAGE 2
INFORMATION IN THIS DOCUMENT IS PROVIDED IN CONNECTION WITH INTEL® PRODUCTS. NO LICENSE, EXPRESS OR IMPLIED, BY ESTOPPEL OR OTHERWISE, TO ANY INTELLECTUAL PROPERTY RIGHTS IS GRANTED BY THIS DOCUMENT.
PAGE 3
Warning of Potential Data Loss IMPORTANT USER INFORMATION. READ AND FOLLOW THESE INSTRUCTIONS PRIOR TO TRUSTED PLATFORM MODULE INITIALIZATION. System integrators, owners, and end users must take precautions to mitigate the chance of data loss. Data encrypted by any program utilizing the Trusted Platform Module (TPM) may become inaccessible or unrecoverable if any of the following occurs: • Lost Password: Loss of any of the passwords associated with the TPM will render encrypted data inaccessible.
PAGE 4
Trusted Platform Module (TPM) The Trusted Platform Module is a component on the desktop board that is specifically designed to enhance platform security above-and-beyond the capabilities of today’s software by providing a protected space for key operations and other security critical tasks. Using both hardware and software, the TPM protects encryption and signature keys at their most vulnerable stages—operations when the keys are being used unencrypted in plain-text form.
PAGE 5
However, migratable keys may not be the appropriate level of protection needed for the application when the user wants the data restricted to a single platform. This requires a nonmigratable key. Non-migratable keys carry with them a usage deficit in that while the key may be backed up and restored (protected from hard disk failure) they are not protected against system or TPM failure. The very nature of a nonmigratable key is that they can be used on one and only one TPM.
PAGE 6
Emergency Recovery File Backup Procedures Use the EMBASSY Security Center to create the TPM Key Archive file (keyarchive.xml) onto a removable media (a floppy disk, CDR, or flash media). Once this is completed, the removable media should be stored in a secure location. DO NOT LEAVE ANY COPIES of the TPM Key Archive on the hard drive or within any hard drive image backups. If a copy of the TPM Key Archive remains on the system, it could be used to compromise the Trusted Platform Module and platform.
PAGE 7
Trusted Platform Module Ownership The Trusted Platform Module is disabled by default when shipped and the owner/end customer of the system assumes “ownership” of the TPM. This permits the owner of the system to control initialization of the TPM and create all the passwords associated with the TPM that will be used to protect their keys and data. System builders/integrators may install the Wave Systems EMBASSY Security Center, but SHOULD NOT attempt to use or activate the TPM or the software package.
PAGE 8
Assuming Trusted Platform Module Ownership Once the TPM has been enabled, ownership must be assumed by using the EMBASSY Security Center. The owner/end user should follow the steps listed below to take ownership of the TPM: 1. Start the system. 2. Launch the EMBASSY Security Center. 3. Select the Owner tab and click on the Establish button. 4. Create the Owner password (before creating any password, review the password recommendations made earlier in this document). 5.
PAGE 9
Recovery Procedures How to Recover from a Hard Drive Failure Restore the latest hard drive image from backup to the new hard drive – no TPM specific recovery is necessary. How to Recover from a Desktop Board or TPM Failure This procedure may restore the migratable keys from the TPM Key Archive, but does not restore any previous keys or content to the TPM. This recovery procedure may restore access to the EMBASSY Security Center that is secured with migratable keys.
PAGE 10
Clearing Trusted Platform Module Ownership WARNING Disconnect the desktop board's power supply from its AC power source before you connect or disconnect cables, or install or remove any board components. Failure to do this can result in personal injury or equipment damage. Some circuitry on the desktop board can continue to operate even though the front panel power switch is off. CAUTION DATA ENCRYPTED BY ANY PROGRAM UTILIZING THE TPM WILL BECOME INACCESSIBLE IF TPM OWNERSHIP IS CLEARED.
PAGE 11
Support Links • For assistance with the Wave Systems EMBASSY Security Center visit: http://www.wave.com/support/ESC/ • For additional information about TPM and enhancing PC security, visit: https://www.trustedcomputinggroup.org.
PAGE 12
Trusted Platform Module Quick Reference