Quick Reference Guide

ManualsBrandsIntel ManualsOtherIntel Desktop Board DQ45EK

Trusted Platform Module (TPM)

System builders/integrators should give this Guide to the

system owners to assist them in enabling and activating

the Trusted Platform Module.

Warning of Potential Data Loss ...................................... 3

Trusted Platform Module (TPM)...................................... 4

System Requirements ..................................................... 4

Security Precautions ....................................................... 4

Password Procedures...........................................................................5

Emergency Recovery File Back Up Procedures .................................5

Hard Drive Image Backup Procedures................................................ 6

Clear Text Backup (Optional).............................................................6

Trusted Platform Module Ownership ............................. 6

Trusted Platform Module Software Installation............. 6

Enabling the Trusted Platform Module .......................... 7

Assuming Trusted Platform Module Ownership........... 7

Recovery Procedures ...................................................... 8

How to Recover from a Hard Drive Failure........................................ 8

How to Recover from a Desktop Board or TPM Failure..................... 8

Clearing Trusted Platform Module Ownership.............. 9

Support Links.................................................................. 10

D15174-001

Summary of content (10 pages)

PAGE 1
Trusted Platform Module (TPM) Quick Reference Guide System builders/integrators should give this Guide to the system owners to assist them in enabling and activating the Trusted Platform Module. Warning of Potential Data Loss ...................................... 3 Trusted Platform Module (TPM)...................................... 4 System Requirements ..................................................... 4 Security Precautions .......................................................
PAGE 2
INFORMATION IN THIS DOCUMENT IS PROVIDED IN CONNECTION WITH INTEL® PRODUCTS. NO LICENSE, EXPRESS OR IMPLIED, BY ESTOPPEL OR OTHERWISE, TO ANY INTELLECTUAL PROPERTY RIGHTS IS GRANTED BY THIS DOCUMENT.
PAGE 3
Warning of Potential Data Loss IMPORTANT USER INFORMATION. READ AND FOLLOW THESE INSTRUCTIONS PRIOR TO TRUSTED PLATFORM MODULE INITIALIZATION. System integrators, owners, and end users must take precautions to mitigate the chance of data loss. Data encrypted by any program utilizing the Trusted Platform Module (TPM) may become inaccessible or unrecoverable if any of the following occurs: • Lost Password: Loss of any of the passwords associated with the TPM will render encrypted data inaccessible.
PAGE 4
Trusted Platform Module (TPM) The Trusted Platform Module is a component on the desktop board that is specifically designed to enhance platform security above-and-beyond the capabilities of today’s software by providing a protected space for key operations and other security critical tasks. Using both hardware and software, the TPM protects encryption and signature keys at their most vulnerable stages—operations when the keys are being used unencrypted in plain-text form.
PAGE 5
The very nature of a non-migratable key is that they can be used on one and only one TPM. In the event of a system or TPM failure, all non-migratable keys and the data associated with them will be inaccessible and unrecoverable. The following precautions and procedures may assist in recovering from any of the previously listed situations. Failure to implement these security precautions and procedures may result in unrecoverable data loss.
PAGE 6
Hard Drive Image Backup Procedures To allow for emergency recovery from a hard drive failure, frequent images of the hard drive should be created and stored in a secure location. In the event of a hard drive failure, the latest image can be restored to a new hard drive and access to the encrypted data can be re-established. ✏ NOTE All encrypted and unencrypted data that was added after the last image was created will be lost.
PAGE 7
Enabling the Trusted Platform Module The Trusted Platform Module is disabled by default when shipped to insure that the owner/end customer of the system initializes the TPM and configures all security passwords. The owner/end customer should use the following steps to enable the TPM. 1. While the PC is displaying the splash screen (or POST screen), press the key to enter BIOS. 2. Use the arrow keys to go to the Advanced Menu, select Peripheral Configuration, and then press the key. 3.
PAGE 8
11. After completing the archive function, the TPM Key Archive (keyarchive.xml) that is now on a removable media should be stored in a secure location. No copies of the keyarchive.xml should remain on the system. This procedure should be repeated after any password changes or the addition of new users or TPM enabled software. 12.
PAGE 9
7. Enter the Owner password when prompted. 8. Restoring the keys may take up to five (5) minutes and you may be prompted for your Windows password. After the keys have been successfully restored, you should be able to access previously encrypted files. Clearing Trusted Platform Module Ownership WARNING Disconnect the desktop board's power supply from its AC power source before you connect or disconnect cables, or install or remove any board components.
PAGE 10
Support Links • For assistance with the STMicroelectronics* Trusted Platform Module visit: http://www.st.com • For assistance with the Wave System* EMBASSY* Trusted Suite visit: http://www.wave.com/support/ets.html • For additional information about TPM and enhancing PC security, visit: https://www.trustedcomputinggroup.