Skip to main content

Enable TPM/TCM

The solution supports Trusted Platform Module (TPM), Version 1.2 or Version 2.0

Note
For customers in the People’s Republic of China, TPM is not supported. However, customers in the People’s Republic of China can install a Trusted Cryptographic Module (TCM) adapter (sometimes called a daughter card).
When a system board is replaced, you must make sure that the TPM/TCM policy is set correctly.
CAUTION
Take special care when setting the TPM/TCM policy. If it is not set correctly, the system board can become unusable.
  • Set the TPM policy
    By default, a replacement system board is shipped with the TPM policy set to undefined. You must modify this setting to match the setting that was in place for the system board that is being replaced.
  • Assert Physical Presence
    Before you can assert Physical Presence, the Physical Presence Policy must be enabled. By default, the Physical Presence Policy is enabled with a timeout of 30 minutes.
  • Set the TPM version
    To be able to set the TPM version, Physical Presence must be asserted.
  • Enable UEFI Secure Boot
    Optionally, you can enable UEFI Secure Boot.
  • Trusted Cryptographic Module (TCM) replacement
    Use the following procedures to remove and install the Trusted Cryptographic Module (TCM) .