AOM-TPM-9655V AOM-TPM-9655H USER'S MANUAL
Contents
1. Enter Setup tand 4 to move selectior ESC ta boot using defaults 1 Once you are at the utility shell screen run the command map This command displays a list of devices connected to the motherboard 2 8 Chapter 2 Configuring the AOM TPM 9655V 9655H 2 Then type fs0 This command takes you to the directory of the utility on the USB flash drive startup nsh 3 To lock the add on TPM module run the command TPMFactProv efi f DefaultServerTpmProv AUX3 xml l fSsO TXT gt cd TPMFactProv He t mT D gt ALL U 1 HIN J TPM tory Provisioning Tool Kit pdt TPMFactProv efi fSO TXTSTPMFactProv gt TPMFactProv efi f DefaultServerTpmProv AUX3 xml 1 TPMFactProv gt 2 9 SUPER AOM TPM 9655V 9655H User s Manual 4 To check if the add on TPM is locked successfully run the command ServerT XTINFO efi c a SB i x1 x USB Ox2 0x0 HD s null fSO TXT gt cd serverTool fsO TXT serverTool gt ServerTXTINFO efi c a_ 5 If the add on TPM is successfully locked the value of nvLocked equals 1 See the image on step 6 for the continuation of this screen PM Platform Configure 35 40 ED CA 91 2 10 Chapter 2 Configuring the AOM TPM 9655V 9655H 6 The screen below is a continuation of the screen on step 5 r I0 Address in Bytes END LOG FIT TABLE summary Bio Ss width bitpos 5 ini 7 If the description and value show up2. Getting Started a HomeGroup amp Indexing Options Internet Options amp Keyboard Location and Other Sensors P Mouse E Network and Sharing Center Notification Area Icons W Parental Controls MB Performance Information and Tools Ez Personalization iE Phone and Modem Power Options A Programs and Features Recovery 98 Region and Language ig RemoteApp and Desktop Connections amp Sound e Speech Recognition Sync Center E System LL Taskbar and Start Menu Troubleshooting B User Accounts fl Windows CardSpace bid Windows Defender Windows Firewall E Windows Update 5 You will be given options on how you want to store the recovery key In the screen below select Save the recovery key to a file and save it on a USB flash drive How do you want to store your recovery key A recovery key is different from your PIN or Startup key It is used to access your files and folders if a problem with your computer prevents you from doing so Save the recovery key to a USB flash drive gt Save the recovery key to a file N Print the recovery key SUPER AOM TPM 9655V 9655H User s Manual 6 After you save the TPM recovery key on a USB flash drive the encryption of drive C will begin Select Start Encryption to start the encryption Are you ready to encrypt this drive The selected drive is C You can keep working while the drive is being encrypted Your computer s performance will be affected and
3. not be used in life support systems medical equipment nuclear facilities or systems aircraft aircraft devices aircraft emergency com munication devices or other critical systems whose failure to perform be reasonably expected to result in significant injury or loss of life or catastrophic property damage Accordingly Supermicro disclaims any and all liability and should buyer use or sell such products for use in such ultra hazardous ap plications it does so entirely at its own risk Furthermore buyer agrees to fully indemnify defend and hold Supermicro harmless for and against any and all claims demands actions litigation and proceedings of any kind arising out of or related to such ultra hazardous use or sale
4. SUPER AOM TPM 9655V AOM TPM 9655H USER S MANUAL Revision 1 0 The information in this User s Manual has been carefully reviewed and is believed to be accurate The vendor assumes no responsibility for any inaccuracies that may be contained in this document and makes no commitment to update or to keep current the information in this manual or to notify any person or organization of the updates Please Note For the most up to date version of this manual please see our web site at www supermicro com Super Micro Computer Inc Supermicro reserves the right to make changes to the product described in this manual at any time and without notice This product including software and docu mentation is the property of Supermicro and or its licensors and is supplied only under a license Any use or reproduction of this product is not allowed except as expressly permitted by the terms of said license IN NO EVENT WILL Super Micro Computer Inc BE LIABLE FOR DIRECT INDIRECT SPECIAL INCIDENTAL SPECULATIVE OR CONSEQUENTIAL DAMAGES ARISING FROM THE USE OR INABILITY TO USE THIS PRODUCT OR DOCUMENTATION EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES IN PARTICULAR SUPER MICRO COMPUTER INC SHALL NOT HAVE LIABILITY FOR ANY HARDWARE SOFTWARE OR DATA STORED OR USED WITH THE PRODUCT INCLUDING THE COSTS OF REPAIRING REPLACING INTEGRATING INSTALLING OR RECOVERING SUCH HARDWARE SOFTWARE OR DATA Any disputes arising between ma
5. an Megatrends Inc vanced TXT Support Enabled SUPER AOM TPM 9655V 9655H User s Manual 7 Save and exit to complete the add on TPM module BIOS configuration stage Aptio Setup Utility Copyright C 2012 American Megatrends Inc UEFI Built in EFI Shell 8 The next step is to run the Intel Provision Utility Refer to the next section for instructions 2 6 Chapter 2 Configuring the AOM TPM 9655V 9655H 2 4 Intel Provision Utility This section inlcudes instructions on how to run the Intel Provision Utility to lock the add on TPM module Contact Supermicro Technical Support to download a copy of the utility to a USB flash drive With the USB flash drive plugged into your system you must boot to the EFI shell to run the utility There are two ways you can boot to the EFI shell e Option 1 You can boot to the EFI shell from the Save and Exit screen of the BIOS This is the same screen shown in Step 7 of Section 2 3 If you choose this option select UEFI Built in EFI Shell and you will see the EFI shell see the next page for the shell screen Aptio Setup Utility Copyright C 2012 American Megatrends Inc UEFI Built in EFI Shell 2 PER AOM TPM 9655V 9655H User s Manual e Option 2 You can also boot to the EFI shell by pressing the F11 key during system boot up If you choose this option you will see the screen below UEFI Built in EFI l UEFI Flash Drive UT_USB20 0 00
6. ans and knowledgeable end users It provides instructions on how to install and configure the AOM TPM 9655V 9655H on Supermicro motherboards Manual Organization Chapter 1 provides an overview on the AOM TPM 9655V 9655H Chapter 2 provides hardware installation BIOS configuration and the Intel Provi sion Utility setup instructions Conventions Used in This Manual Pay special attention to the following symbols for proper installation and to prevent damage to the system or injury to yourself Warning Important information given to ensure proper system installation or to prevent damage to the components or injury to yourself f Note Additional information given to ensure correct add on module setup SUPER AOM TPM 9655V 9655H User s Manual Contacting Supermicro Headquarters Address Super Micro Computer Inc 980 Rock Ave San Jose CA 95131 U S A Tel 1 408 503 8000 Fax 1 408 503 8008 Email marketing supermicro com General Information support supermicro com Technical Support Web Site www supermicro com Europe Address Super Micro Computer B V Het Sterrenbeeld 28 5215 ML s Hertogenbosch The Netherlands Tel 31 0 73 6400390 Fax 31 0 73 6416525 Email sales supermicro nl General Information support supermicro nl Technical Support rma supermicro nl Customer Support Web Site www supermicro com Asia Pacific Address Super Micro Computer Inc 3F No 150 Jian 1st Rd Zhongh
7. ck e Infineon s TPM 1 2 is Common Criteria certified at Evaluation Assurance Level EAL 4 Moderate e General Purpose Input Output 1 1 SUPER AOM TPM 9655V 9655H User s Manual Intel Trusted Execution Technology Support e AMD Secure Virtual Machine Architecture Support e Full personalization with Endorsement Key EK and EK certificate e Power saving sleep mode e 3 3 V power supply e WHQL dual mode 1 1b 1 2 TPM Windows Kernel Mode Driver 1 3 Specifications Security Features e Over Under voltage Detection e Low frequency sensor e High frequency filter e Reset Filter e Memory Encryption Decryption MED Application Support e Microsoft Outlook and Outlook Expres e Microsoft Office 2010 Office 2000 Office XP and Office 2003 e Microsoft Internet Explorer e Mozilla Firefox e Mozilla Thunderbird e Netscape Communicator e Microsoft Encrypted File System 1 2 Chapter 1 Introduction to the AOM TPM 9655V 9655H RSA Secure ID Check Point SecuRemote SecureClient Check Point VPN 1 FireWall 1 NG Entrust Desktop Manager Solutions Adobe Acrobat 6 0 Professional Compliance Environmental RoHS Compliant 6 6 Pb Free ROHS Supported Platforms Supermicro motherboards with 20 pin TPM connectors Mechanical Specifications Dimensions 8mm x 26mm x 25mm W x L x H AOM TPM 9655V Dimensions 15 6mm x 26mm x 13 1mm W x L x H AOM TPM 9655H 1 3 SUPER AOM TPM 9655V 9655H U
8. d awa p k kan ka e da kan 2 7 2 5 Add On TPM Module in Legacy BIO S kk ke 2 13 SUPER AOM TPM 9655V 9655H User s Manual Notes vi Chapter 1 Introduction to the AOM TPM 9655V 9655H Chapter 1 Overview 1 1 Overview of the AOM TPM 9655V 9655H Card The Supermicro add on module AOM TPM 9655V 9655H is a security device that stores RSA encryption keys specific to the host system for hardware authentication The add on module is based on Infineon s Trusted Platform Module TPM and its specifications are fully compliant and published by the Trusted Computing Group TCG certification process The TPM is protected by an encapsulated microcon troller security chip to protect important information such as keys passwords and digital ceritficates stored on the chip against external attacks and physical theft The TPM module is paired with a motherboard and is integrated into the boot process to gather runtime information for trusted reporting The AOM TPM 9655V 9655H is ideal for users looking for additional security for their systems 1 2 Key Features e TCG 1 2 2 0 compliant trusted platform module TPM e Microcontroller in 0 22 0 09 um CMOS technology e Compliant embedded software e EEPROM for TCG firmware enhancements and for user data and keys e Hardware accelerator for SHA 1 and SHA 256 hash algorithm e True Random Number Generator TRNG e Trick counter with tamper detection e Protection against Dictionary Atta
9. e Dist New Taipei City 235 Taiwan R O C Tel 886 2 8226 3990 Fax 886 2 8226 3992 Email support supermicro com tw Tel 886 2 8226 3990 Web Site www supermicro com tw Preface Table of Contents Preface Abdil TNS N GI LIB s Ah seca arectsadsatansacanceaceawensnsenennciedaaussdbeatecbadbanananaeneqnennecieantsecaseaancoedes 3 Manual Organization kk kk kk K k to K KEK ana KK KK K KK KK KK A ne 3 Conventions Used in This Manual L L L Ek KK KK KK YY Conacing SUN SVMF Os scapes aries Ea E E E EEEO EENS 4 Chapter 1 Overview 1 1 Overview of the AOM TPM 9655V 9655H Card E keke 1 1 12 Key M L enie A E bcan sadam k ma bad ne kedl an 1 1 Tar SS CIMG AMONG earr Ee ere AEN rar A P rp J xn ox 3 1 2 SR A eber rr A A E E 1 2 Application SUPP OM w aa aOO__ DoDoD o_ gpa agau 1 2 Compliance Environmental ccccccccccceeeceeseseeceeececeeeceeseeeesseeeesseeeeeseeeesaes 1 3 ouppored a ONS aaa cs ass oo ooo mumm 1 3 Mechanical SPCC CANONS i l2 cnc renr EEE E aa OE 1 3 Chapter 2 Installation and Configuration 2 1 The AOM TPM 9655V 9965H Card i kk kk kk k k kK kK ke 2 1 2 2 Add on TPM Module Installation E kk 2 2 2 3 Add on TPM Module in UEFI BIOS l kk kk kk KK kk 2 3 2 4 inte Provision ICY i x iii A2 alaya yana hek d ee na dann k n ai wil nu
10. free space will be used by BitLocker during encryption E Run BitLocker system check The system check will ensure that BitLocker can read the recovery and encryption keys correctly before encrypting the drive BitLocker will restart your computer to test the system before encrypting Note This check can take some time but is recommended because there is a risk that you might need to enter the recovery key to unlock the drive 7 After the encryption is complete go to the Control Panel to check the status of BitLocker You should see three options Turn Off BitLocker Suspend Protection Manage BitLocker Help protect your files and folders by encrypting your drives BitLocker Drive Encryption helps prevent unauthorized access to any files stored on the drives shown below You are able to use the computer normally but unauthorized users cannot read or use your files What should I know about BitLocker Drive Encryption before I turn it on BitLocker Drive Encryption Hard Disk Drives y C f Turn Off BitLocker On Suspend Protection fa Manage BitLocker 2 16 Chapter 2 Configuring the AOM TPM 9655V 9655H 8 You can also check the status in the BIOS If the TPM module is locked the TPM Owner Status should indicate Owned BIOS SETUP UTILITY TCG TPA SUPPORT SUPER AOM TPM 9655V 9655H User s Manual Notes 2 18 Disclaimer Continued The products sold by Supermicro are not intended for and will
11. in red then the lock was unsuccessful See the error messages in red in the image below er I0 Address 0071h in Bytes 01h osh OOFCh 0h odh Oh ooh ooh 1 TXT mode J summary 2 11 SUPER AOM TPM 9655V 9655H User s Manual 8 If the add on TPM lock was unsuccessful and you received an error message follow the steps below to troubleshoot the problem e Make sure that you are using a supported CPU E5 2600 C2 Stepping or later model e Go to the Advanced tab of the BIOS and make sure TXT Support is enabled e Check the add on TPM card if it is installed properly on the motherboard e Contact Supermicro Technical Support for additional assistance 2 12 Chapter 2 Configuring the AOM TPM 9655V 9655H 2 5 Add On TPM Module in Legacy BIOS This section inlcudes instructions on how to run the add on TPM module Legacy BIOS configuration to lock Owned the module in the Windows 7 operating system 4 Note Legacy BIOS is for AMD systems 1 In the Advanced tab of the BIOS enable TPM Support by selecting Yes HIS SETUP UTILITY TOG TPA SUPPORT 2 13 SUPER AOM TPM 9655V 9655H User s Manual 2 Highlight Clearing the TPM and hit Enter Then the system will automatically reboot for the changes to take effect After the system reboot go back to the Advanced tab of the BIOS for the next step BIOS SETUP UTILITY Advanced Trusted Comput ing Enable Disable TPM E i ed su
12. mages displayed are for illustration only The location of JTPM1 on your motherboard may differ from the illustration above 2 2 Chapter 2 Configuring the AOM TPM 9655V 9655H 2 3 Add on TPM Module in UEFI BIOS After you install the add on TPM module on the motherboard you need to configure the BIOS to detect the module 1 On system boot up press the DEL key to enter the BIOS 2 Once you are in the BIOS you will start on the Main page Press the right arrow key to move to the Advanced tab If the add on module is installed and detected by the system Trusted Computing will appear Aptio Setup Utility Copyright C 2012 American Megatrends Inc gt Trusted Computing 2 3 SUPER AOM TPM 9655V 9655H User s Manual 3 Select Trusted Computing and you will see the screen below Aptio Setup Utility Copyright 2012 American Megatrends Inc gt Intel TXT LT SX Configuration 4 Change the TPM State feature to Enabled Aptio Setup Utility Copyright C 2012 American Megatrends Inc Wancec PM SUPPORT TPM State Enabled I 2 4 Chapter 2 Configuring the AOM TPM 9655V 9655H 5 Scroll down and select Intel TXT LT SX Configuration Aptio Setup Utility Copyright C 2012 American Megatrends Inc idvanced TXT Support Disabled nE Entorn 6 Change the TXT Support feature to Enabled Aptio Setup Utility Copyright C 2012 Americ
13. nufacturer and customer shall be governed by the laws of Santa Clara County in the State of California USA The State of California County of Santa Clara shall be the exclusive venue for the resolution of any such disputes Supermicro s total liability for all claims will not exceed the price paid for the hardware product FCC Statement Refer to Supermicro s web site for FCC Compliance Information California Best Management Practices Regulations for Perchlorate Materials This Perchlorate warning applies only to products containing CR Manganese Dioxide Lithium coin cells Perchlorate Material special handling may apply See www dtsc ca gov hazardouswaste perchlorate WARNING Handling of lead solder materials used in this product may expose you to lead a chemical known to the State of California to cause birth defects and other reproductive harm Manual Revision 1 0 Release Date March 13 2014 Unless you request and receive written permission from Super Micro Computer Inc you may not copy any part of this document Information in this document is subject to change without notice Other products and companies referred to herein are trademarks or registered trademarks of their respective companies or mark holders Copyright 2014 by Super Micro Computer Inc All rights reserved Printed in the United States of America Preface Preface About This Manual This manual is written for system integrators IT technici
14. pport in BIOS Execute TPM Command Don t changel Clearing the TPM Press Enter TPM Enable Disable Status Enabled TPM Owner Status Owned Select Screen TL Select Item a Change Option F1 General Help F10 Save and Exit ESC Exit v02 69 C Copyright 1985 2010 American Megatrends Inc 3 In the Advanced tab highlight Execute TPM Command and select Enabled Exit the BIOS and boot to Windows 7 BIOS SETUP UTILITY Advanced Trusted Comput ing Enable Activate Disable Deactivate TCG TPM SUPPORT Yes Command to TPM TPM Enable Disable Status Disabled TPM Owner Status UnOwned Options Don t change Disabled Enabled Select Screen Select Item Change Option General Help Save and Exit Exit v02 69 C Copyright 1985 2010 American Megatrends Inc 2 14 Chapter 2 Configuring the AOM TPM 9655V 9655H 4 Once you are in Windows 7 open the Control Panel and select BitLocker Drive Encryption to turn on the BiteLocker ey gt t e i Control Panel All Control Panel Items v El Search Control Pane 2 Adjust your computer s settings View by Small icons gt Action Center h Administrative Tools AutoPlay w Backup and Restore Dy BitLocker Drive Encryption r Color Management Credential Manager Date and Time Default Programs m3 Desktop Gadgets a Device Manager ia Devices and Printers E Display Ease of Access Center _B Folder Options JA Fonts d
15. ser s Manual Notes 1 4 Chapter 2 Configuring the AOM TPM 9655V 9655H Chapter 2 Installation and Configuration 2 1 The AOM TPM 9655V 9965H Card The add on module AOM TPM 9655 comes in the vertical and horizontal forms The AOM TPM 9655V is the vertical and the AOM TPM 9655H is the horizontal See below for pictures of the add on modules AOM TPM 9655V AOM TPM 9655H gt Note For the add on module support an E5 2600 C2 Stepping CPU or later model is required 2 1 SUPER AOM TPM 9655V 9655H User s Manual 2 2 Add on TPM Module Installation 1 A 20 pin female connector is located on the AOM TPM 9655V 9655H When installing this add on module to a motherboard connect it to the 20 pin JTPM1 male connector on the Supermicro motherboard JTPM1 6 20 Pin connector J 288 9bX 0 310d CLOTS dO COdIflocmiloom OA HCK I TN B O O O Key pin sE O B O 2 Pin 18 on the add on module is the key pin This key pin is a guide to help you install the add on module in the right direction See the image above for the key pin and the image below for the pin definition 20 19 GND CLK LFRAME NO USE RESET LAD2 LAD3 LAD1 3V3 GND LADO NO USE NO USE SERIRQ NO USE NO USE GND NO USE NO USE 2 1 Note I
Download Pdf Manuals
Related Search