Users Guide

TPM activation
Trusted Platform Module (TPM) is an industry standard cryptographic module that provides attestation,
integrity metrics and reporting, and a secure key hierarchy. Client systems use TPM to verify if the state of
the system has changed between two boot cycles.
To activate and check the TPM activation:
1. If not set, set the BIOS password on the system. Type:
cctk --setuppwd=<new-BIOS-password>
2. If not enabled, enable TPM. by typing the following command:
cctk --tpm=on
3. Reboot the system.
4. To activate TPM, type the following command:
cctk --tpmactivation=activate --valsetuppwd=<Setuppwd>
5. Reboot the system without interruption till the operating system loads.
6. To check the status of TPM. type:
cctk --tpmactivation
The status is displayed as activate.
SCE failing to run on Windows Preinstallation
Environment (Windows PE)
The SCE generated using the Export option on the GUI is failing to run on Windows PE. To configure
BIOS using SCE, on the target system running the Windows PE operating systems:
1. On systems running the Windows operating systems, extract the contents of SCE to a folder using
the following command:
Sce.exe /e=<folder_path_to_extract_contents>
NOTE: For more information on using the command, use /h switch.
2. Copy the extracted contents to an accessible location on the system.
3. From the location of the extracted contents, run the following command to apply the configuration:
applyconfig.bat /logfile <A valid and existing folder with write permission>
\<A valid file name>
For example, applyconfig.bat /logfile C:\log.txt
To apply the configuration on a system, where setup or system password has been set, run the
following command: applyconfig.bat /logfile <A valid and existing folder with
write permission>\<A valid file name> "--valsetuppwd= <setup password>"
Example 1: applyconfig.bat /logfile C:\log.txt "--valsetuppwd=password"
Example 2: applyconfig.bat /logfile C:\log.txt "--valsyspwd=password"
22