Datasheet

Product Description
43
1.13 Trusted Platform Module
The optional Trusted Platform Module (TPM) is a component on the desktop board that is
specifically designed to enhance platform security above-and-beyond the capabilities of today’s
software by providing a protected space for key operations and other security critical tasks. Using
both hardware and software, the TPM protects encryption and signature keys at their most
vulnerable stages—operations when the keys are being used unencrypted in plain-text form. The
TPM is specifically designed to shield unencrypted keys and platform authentication information
from software-based attacks.
1.13.1 System Requirements
•
Intel Desktop Board D915GEV or D915GRF
•
Microsoft Windows 2000 Professional (SP4) or Microsoft Windows XP Professional (SP1)
•
NTFS file system required
•
Microsoft Internet Explorer* 5.5 or later
•
Adobe* Acrobat* 5.0 or later
1.13.2 Warning of Potential Data Loss
CAUTION
Failure to follow the instructions below may cause you to lose data. Read and follow these
instructions prior to Trusted Platform Module initialization.
System integrators, owners, and end users must take precautions to mitigate the chance of data
loss. Data encrypted by any program utilizing the Trusted Platform Module (TPM) may become
inaccessible or unrecoverable if any of the following occurs:
• Lost Password: Loss of any of the passwords associated with the TPM will render encrypted
data inaccessible. No password recovery is available. Read the Security Precautions for
Password Procedures.
• Hard Drive Failure: In the event of a failure of a hard disk (or other storage media) that
contains encrypted data, an image of the hard disk (or other storage media) must be restored
from backup before access to encrypted data may become available. The owner/user should
backup the system hard disk on a regular basis. Read the Security Precautions below for
Hard Drive Backup Procedures.
• Platform Failure: In the event of a platform failure and/or replacement of the motherboard,
recovery procedures may allow migratable keys to be recovered and may restore access to
encrypted data. All non-migratable keys and their associated data will be lost. Both the
Infineon* Security Platform software and Wave Systems EMBASSY Trust Suite utilize
migratable keys. Please check any other software that accesses the TPM for migratability.
Read the Security Precautions for Emergency Recovery File Back Up Procedures.
• Loss of Trusted Platform Module Ownership: Trusted Platform Module Ownership/contents
may be cleared (via a BIOS switch) to allow for the transfer of a system to a new owner. If
TPM ownership is cleared, either intentionally or in error, recovery procedures may allow the
migratable keys to be recovered and may restore access to encrypted data. Read the Security
Precautions for Emergency Recovery File Back Up Procedures.