Technical Product Specification

Functional Architecture Intel® Server Board S5520UR and S5520URT TPS
Intel order number E44031-012 Revision 1.9
42
Table 13. TSetup Utility – Security Configuration Screen Fields
Setup Item
Options
Help Text
Comments
TPM State*
Enabled and Activated
Enabled and Deactivated
Disabled and Activated
Disabled and Deactivated
Information only.
Shows the current TPM device
state.
A disabled TPM device will not
execute commands that use TPM
functions and TPM security
operations will not be available.
An enabled and deactivated TPM is
in the same state as a disabled
TPM except setting of TPM
ownership is allowed if not present
already.
An enabled and activated TPM
executes all commands that use
TPM functions and TPM security
operations will be available.
TPM
Administrative
Control**
No Operation
Turn On
Turn Off
Clear Ownership
[No Operation] - No changes to current
state.
[Turn On] - Enables and activates TPM.
[Turn Off] - Disables and deactivates
TPM.
[Clear Ownership] - Removes the TPM
ownership authentication and returns
the TPM to a factory default state.
Note: The BIOS setting returns to [No
Operation] on every boot cycle by
default.
3.9.3 Intel
®
Trusted Execution Technology (Intel® TXT)
3.9.3.1 Overview
Intel
®
Trusted Execution Technology (Intel
®
TXT) for safer computing, formerly code named
LaGrande Technology, is a versatile set of hardware extensions to Intel
®
processors and
chipsets that enhance the platform with security capabilities such as measured launch and
protected execution. Intel
®
TXT provides hardware-based mechanisms that help protect against
software-based attacks and protects the confidentiality and integrity of data stored or created
on the system. It does this by enabling an environment where applications can run within their
own space, protected from all other software on the system. These capabilities provide the
protection mechanisms, rooted in hardware, that are necessary to provide trust in the
application's execution environment. In turn, this can help to protect vital data and processes
from being compromised by malicious software running on the platform. Long available on
client platforms, Intel
®
is now enabling Intel
®
TXT on selected server platforms as well.
3.9.3.2 Intel® TXT hardware overview
Implementation of a Trusted Execution Technology-enabled platform requires a number of