Intel D915GMH Product Specification - Page 49

Enabling the Trusted Platform Module, Assuming Trusted Platform Module Ownership

Get Intel D915GMH PDF manuals and user guides View all Intel D915GMH manuals
Add to My Manuals
Save this manual to your list of manuals

Page 49 highlights

Product Description 1.14.5 Enabling the Trusted Platform Module The Trusted Platform Module is disabled by default when shipped to insure that the owner/end customer of the system initializes the TPM and configures all security passwords. The owner/end customer should use the following steps to enable the TPM. 1. While the PC is displaying the splash screen (or POST screen), press the key to enter BIOS. 2. Use the arrow keys to go to the Advanced Menu, select Peripheral Configuration, and then press the key. 3. Select the Trusted Platform Module, press , and select Enabled and press again (display should show: Trusted Platform Module [Enabled]). 4. Press the key, select Ok and press . 5. System should reboot and start Microsoft Windows. 1.14.6 Assuming Trusted Platform Module Ownership Once the TPM has been enabled, ownership must be assumed by using the Infineon Security Platform Software. The owner/end user should follow the steps listed below to take ownership of the TPM: 1. Start the system. 2. Launch the Infineon Security Platform Initialization Wizard. 3. Create Owner password (before creating any password, review the Password Recommendations made earlier in this document). 4. Create a new Recovery Archive (note the file name and location). 5. Specify a Security Platform Emergency Recovery Token password and location. (this password should not match the Owner password or any other password). 6. Define where to save the Emergency Recovery Token (note the file location and name). 7. The software will then create recovery archive files and finalize ownership of the TPM. 8. After completing the Infineon Security Platform Initialization Wizard, the Emergency Recovery Token (SPEmRecToken.xml) must be moved to a removable media (floppy, CDR, flash media, etc) if the file was not saved to a removable media during installation. Once this is done, the removable media should be stored in a secure location. No copies of this Emergency Recovery Token file should remain on the system. If a copy remains on the system, it could be used to compromise the security of the platform. 9. Launch the Infineon Security Platform User Initialization Wizard. 10. Create a Basic User password (this password is the most frequently used and should not match any other password). 11. Select and configure Security Platform features for this user. 12. After completing the Infineon Security Platform User Initialization Wizard, a copy of the Emergency Recovery Archive (SPEmRecArchive.xml) should be copied to a removable media and stored in a secure location. This procedure should be repeated after any password changes or the addition of new users. 13. Restart the system. 14. To backup the keys for the EMBASSY Trust Suite, the Key Transfer Manager software must be configured. Launch the Key Transfer Manager from the program menu. 49

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
Product Description
49
1.14.5
Enabling the Trusted Platform Module
The Trusted Platform Module is disabled by default when shipped to insure that the owner/end
customer of the system initializes the TPM and configures all security passwords.
The owner/end
customer should use the following steps to enable the TPM.
1.
While the PC is displaying the splash screen (or POST screen), press the <F2> key to enter
BIOS.
2.
Use the arrow keys to go to the Advanced Menu, select Peripheral Configuration, and then
press the <Enter> key.
3.
Select the Trusted Platform Module, press <Enter>, and select Enabled and press <Enter> again
(display should show
:
Trusted Platform Module [Enabled]
).
4.
Press the <F10> key, select Ok and press <Enter>.
5.
System should reboot and start Microsoft Windows.
1.14.6
Assuming Trusted Platform Module Ownership
Once the TPM has been enabled, ownership must be assumed by using the Infineon Security
Platform Software.
The owner/end user should follow the steps listed below to take ownership of
the TPM:
1.
Start the system.
2.
Launch the Infineon Security Platform Initialization Wizard.
3.
Create Owner password (before creating any password, review the Password Recommendations
made earlier in this document).
4.
Create a new Recovery Archive (note the file name and location).
5.
Specify a Security Platform Emergency Recovery Token password and location. (this password
should not match the Owner password or any other password).
6.
Define where to save the Emergency Recovery Token (note the file location and name).
7.
The software will then create recovery archive files and finalize ownership of the TPM.
8.
After completing the Infineon Security Platform Initialization Wizard, the Emergency
Recovery Token (
SPEmRecToken.xml
) must be moved
to a removable media (floppy, CDR,
flash media, etc) if the file was not saved to a removable media during installation.
Once this is
done, the removable media should be stored in a secure location.
No copies of this Emergency
Recovery Token file should remain on the system.
If a copy remains on the system, it could be
used to compromise the security of the platform.
9.
Launch the Infineon Security Platform User Initialization Wizard.
10.
Create a Basic User password (this password is the most frequently used and should not match
any other password).
11.
Select and configure Security Platform features for this user.
12.
After completing the Infineon Security Platform User Initialization Wizard, a copy of the
Emergency Recovery Archive (
SPEmRecArchive.xml
) should be copied to a removable
media and stored in a secure location.
This procedure should be repeated after any password
changes or the addition of new users.
13.
Restart the system.
14.
To backup the keys for the EMBASSY Trust Suite, the Key Transfer Manager software must
be configured.
Launch the Key Transfer Manager from the program menu.