Security Passwords; Intel Trusted Platform Module (Intel Tpm) - Intel BLKDQ45CB Product Manual

Security Passwords

The BIOS includes security features that restrict whether the BIOS Setup program can
be accessed and who can boot the computer. A supervisor password and a user
password can be set for the BIOS Setup and for booting the computer, with the
following restrictions:
• The supervisor password gives unrestricted access to view and change all Setup
options. If only the supervisor password is set, pressing <Enter> at the password
prompt of Setup gives the user restricted access to Setup.
• If both the supervisor and user passwords are set, you must enter either the
supervisor password or the user password to access Setup. Setup options are then
available for viewing and changing depending on whether the supervisor or user
password was entered.
• Setting a user password restricts who can boot the computer. The password
prompt is displayed before the computer is booted. If only the supervisor
password is set, the computer boots without asking for a password. If both
passwords are set, you can enter either password to boot the computer.
For instructions on resetting the password, see "Clearing or Changing Passwords" on
page 54.
®
Intel Trusted Platform Module (Intel
®
The Intel Trusted Platform Module (Intel
platform security above and beyond the capabilities of today's software by providing a
protected space for key operations and other security critical tasks. Using both
hardware and software, the TPM protects encryption and signature keys at their most
vulnerable stages—operations when the keys are being used unencrypted in plain-text
form. The TPM is specifically designed to shield unencrypted keys and platform
authentication information from software-based attacks.
NOTE
The Intel TPM uses the onboard coin-cell battery (CR2032) to maintain its monotonic
counters. One major function of the monotonic counters is for anti-replay protection
of the internal Intel TPM data. If the battery is removed or exhausted, the Intel TPM
data will be deleted in accordance with Trusted Computing Group guidelines. Please
read the Intel TPM user guide and back-up Intel TPM keys and data before removing
the battery.
®
TPM) component is designed to enhance
Desktop Board Features
®
TPM)
23