Quick Reference Guide

ManualsBrandsIntel ManualsOtherIntel Desktop Board DQ45EK

Trusted Platform Module (TPM)

System builders/integrators should pass this Guide on to

the system owner to assist them in enabling and

activating the TPM.

Warning of Potential Data Loss....................................... 3

Trusted Platform Module (TPM).......................................4

System Requirements.......................................................4

Security Precautions.........................................................4

Password Procedures...........................................................................5

Emergency Recovery File Back Up Procedures..................................5

Hard Drive Image Backup Procedures................................................6

Clear Text Backup (Optional) ............................................................. 6

Trusted Platform Module Ownership..............................6

Enabling the Trusted Platform Module...........................6

Assuming Trusted Platform Module Ownership ........... 7

Recovery Procedures ....................................................... 8

How to recover from a hard drive failure............................................ 8

How to recover from a desktop board or TPM failure ........................8

Clearing Trusted Platform Module Ownership .............10

Support Links ...................................................................10

C64174-002

Summary of content (10 pages)

PAGE 1
Trusted Platform Module (TPM) Quick Reference Guide System builders/integrators should pass this Guide on to the system owner to assist them in enabling and activating the TPM. Warning of Potential Data Loss....................................... 3 Trusted Platform Module (TPM)....................................... 4 System Requirements....................................................... 4 Security Precautions......................................................... 4 Password Procedures................
PAGE 2
INFORMATION IN THIS DOCUMENT IS PROVIDED IN CONNECTION WITH INTEL® PRODUCTS. NO LICENSE, EXPRESS OR IMPLIED, BY ESTOPPEL OR OTHERWISE, TO ANY INTELLECTUAL PROPERTY RIGHTS IS GRANTED BY THIS DOCUMENT.
PAGE 3
Warning of Potential Data Loss IMPORTANT USER INFORMATION. READ AND FOLLOW THESE INSTRUCTIONS PRIOR TO TRUSTED PLATFORM MODULE INITIALIZATION. System integrators, owners, and end users must take precautions to mitigate the chance of data loss. Data encrypted by any program utilizing the Trusted Platform Module (TPM) may become inaccessible or unrecoverable if any of the following occurs: • Lost Password: Loss of any of the passwords associated with the TPM will render encrypted data inaccessible.
PAGE 4
Trusted Platform Module (TPM) The Trusted Platform Module is a component on the desktop board that is specifically designed to enhance platform security above-and-beyond the capabilities of today’s software by providing a protected space for key operations and other security critical tasks. Using both hardware and software, the TPM protects encryption and signature keys at their most vulnerable stages—operations when the keys are being used unencrypted in plain-text form.
PAGE 5
not protected against system or TPM failure. The very nature of a nonmigratable key is that they can be used on one and only one TPM. In the event of a system or TPM failure, all non-migratable keys and the data associated with them will be inaccessible and unrecoverable. The following precautions and procedures may assist in recovering from any of the previously listed situations. Failure to implement these security precautions and procedures may result in unrecoverable data loss.
PAGE 6
copied to a removable media and stored in a secure location. This procedure should be repeated after any password changes or the addition of a new user. Hard Drive Image Backup Procedures To allow for emergency recovery from a hard drive failure, frequent images of the hard drive should be created and stored in a secure location. In the event of a hard drive failure, the latest image can be restored to a new hard drive and access to the encrypted data may be re-established.
PAGE 7
3. 4. 5. Select the Trusted Platform Module, press , and select Enabled and press again (display should show: Trusted Platform Module [Enabled]). Press the key, select Ok and press . System should reboot and start Microsoft Windows. Assuming Trusted Platform Module Ownership Once the TPM has been enabled, ownership must be assumed by using the Infineon Security Platform Software. The owner/end user should follow the steps listed below to take ownership of the TPM: 1.
PAGE 8
14. To backup the keys for the EMBASSY Trust Suite, the Key Transfer Manager software must be configured. Launch the Key Transfer Manager from the program menu. 15. Follow the instructions and create and document the locations for both the archive and restoration key files. The key archive should be located on a removable media and stored in a secure location when not in use. 16. Create and document the password to protect the key archive. 17.
PAGE 9
• Emergency Recovery Token Security Password (created with the Infineon Security Platform Initiation Wizard) • Working original operating system (OS) installation, or a restored image of the hard drive • Wave Systems Key Transfer Manager archive password • TPM Ownership password This recovery procedure only restores the migratable keys from the previously created Recovery Archives. 1. 2. 3. Replace the desktop board with the same model as the failed board.
PAGE 10
Clearing Trusted Platform Module Ownership WARNING Disconnect the desktop board's power supply from its AC power source before you connect or disconnect cables, or install or remove any board components. Failure to do this can result in personal injury or equipment damage. Some circuitry on the desktop board can continue to operate even though the front panel power switch is off. CAUTION DATA ENCRYPTED BY ANY PROGRAM UTILIZING THE TPM WILL BECOME INACCESSIBLE IF TPM OWNERSHIP IS CLEARED.