Intel D865GRH D865GRH_TechProdSpec. - Page 56

Trusted Platform Module

Page 56 highlights

Intel Desktop Board D865GRH Technical Product Specification 1.13 Trusted Platform Module The Trusted Platform Module (TPM) is a component on the desktop board that is specifically designed to enhance platform security above-and-beyond the capabilities of today's software by providing a protected space for key operations and other security critical tasks. Using both hardware and software, the TPM protects encryption and signature keys at their most vulnerable stages-operations when the keys are being used unencrypted in plain-text form. The TPM is specifically designed to shield unencrypted keys and platform authentication information from software-based attacks. 1.13.1 System Requirements • Intel Desktop Board D865GRH • Microsoft Windows 2000 Professional (SP4) or Microsoft Windows XP Professional (SP1) • NTFS file system required • Microsoft Internet Explorer* 5.5 or later • Adobe* Acrobat* 5.0 or later (included on Intel Express Installer CD) 1.13.2 Warning of Potential Data Loss CAUTION Failure to follow the instructions below may cause you to loose data. Read and follow these instructions prior to Trusted Platform Module initialization. System integrators, owners, and end users must take precautions to minimize the chance of data loss. Data encrypted by any program utilizing the Trusted Platform Module (TPM) may become inaccessible or unrecoverable if any of the following occur: • Lost Password: Loss of any of the passwords associated with the TPM will render encrypted data inaccessible. No password recovery is available. Read the Security Precautions for Password Procedures. • Hard Drive Failure: In the event of a hard disk (or other storage media) failure that contains encrypted data, an image of the hard disk (or other storage media) must be restored from backup before access to encrypted data may become available. The owner/user should backup the system hard disk on a regular basis. Read the Security Precautions below for Hard Drive Backup Procedures. • Platform Failure: In the event of a platform failure and/or replacement of the motherboard, recovery procedures may allow migratable keys to be recovered and may restore access to encrypted data. All non-migratable keys and their associated data will be lost. Both the Infineon* Security Platform Software and Wave Systems EMBASSY* Trusted Suite utilize migratable keys. Check any other software that accesses the TPM to determine key migratability. Read the Security Precautions for Emergency Recovery File Back Up Procedures. • Loss of Trusted Platform Module Ownership: Trusted Platform Module Ownership/contents may be cleared (via a BIOS switch) to allow for the transfer of a system to a new owner. If TPM ownership is cleared, either intentionally or in error, recovery 56

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142

Intel Desktop Board D865GRH Technical Product Specification
56
1.13 Trusted Platform Module
The Trusted Platform Module (TPM) is a component on the desktop board that is specifically
designed to enhance platform security above-and-beyond the capabilities of today
s software by
providing a protected space for key operations and other security critical tasks.
Using both
hardware and software, the TPM protects encryption and signature keys at their most vulnerable
stages
operations when the keys are being used unencrypted in plain-text form.
The TPM is
specifically designed to shield unencrypted keys and platform authentication information from
software-based attacks.
1.13.1
System Requirements
Intel Desktop Board D865GRH
Microsoft Windows 2000 Professional (SP4) or Microsoft Windows XP Professional (SP1)
NTFS file system required
Microsoft Internet Explorer* 5.5 or later
Adobe* Acrobat* 5.0 or later (included on Intel Express Installer CD)
1.13.2
Warning of Potential Data Loss
CAUTION
Failure to follow the instructions below may cause you to loose data.
Read and follow these
instructions prior to Trusted Platform Module initialization.
System integrators, owners, and end users must take precautions to minimize the chance of data
loss.
Data encrypted by any program utilizing the Trusted Platform Module (TPM) may become
inaccessible or unrecoverable if any of the following occur:
Lost Password:
Loss of any of the passwords associated with the TPM will render encrypted
data inaccessible.
No password recovery is available.
Read the Security Precautions for
Password Procedures.
Hard Drive Failure:
In the event of a hard disk (or other storage media) failure that contains
encrypted data, an image of the hard disk (or other storage media) must be restored from
backup before access to encrypted data may become available.
The owner/user should backup
the system hard disk on a regular basis.
Read the Security Precautions below for Hard Drive
Backup Procedures.
Platform Failure:
In the event of a platform failure and/or replacement of the motherboard,
recovery procedures may allow migratable keys to be recovered and may restore access to
encrypted data.
All non-migratable keys and their associated data will be lost.
Both the
Infineon* Security Platform Software and Wave Systems EMBASSY* Trusted Suite utilize
migratable keys.
Check any other software that accesses the TPM to determine key
migratability.
Read the Security Precautions for Emergency Recovery File Back Up
Procedures.
Loss of Trusted Platform Module Ownership:
Trusted Platform Module
Ownership/contents may be cleared (via a BIOS switch) to allow for the transfer of a system to
a new owner.
If TPM ownership is cleared, either intentionally or in error, recovery