HP ROM-Based Setup Utility User Guide

Trusted Platform Module
For servers configured with an optional TPM, the following configuration options are available:
• “TPM Functionality” (page 91)
• “TPM Visibility” (page 92)
• “TPM Expansion ROM Measuring” (page 93)
• “TPM Clear” (page 94)
IMPORTANT: TPM menus appear only if the TPM kit is installed.
TPM Functionality
This option controls Trusted Platform Module functionality at startup. Options include:
• Enabled—Enables the TPM and BIOS secure startup. The TPM is fully functional in this mode.
• Disabled (default)—Disables the BIOS secure startup but still allows the TPM to be visible to
the operating system. The TPM functionality is limited, but can respond to most commands in
this mode. Selecting Disabled may prevent the server from booting to a TPM-aware operating
system.
CAUTION: A TPM locks all data access if proper procedures are not followed for modifying the
server, including: updating system or option firmware, replacing hardware such as the system
board and hard drive, or modifying TPM OS settings.
For information on installing and enabling the TPM module option, see the user documents for your
server model and the Data security in HP ProLiant servers using the Trusted Platform Module and
Microsoft Windows BitLocker Drive Encryption white paper: http://h20564.www2.hp.com/portal/
site/hpsc/public/kb/docDisplay/?docId=emr_na-c01681891.
Server Security menu 91