Retaining The Recovery Key/Password; Enabling The Trusted Platform Module - HPE ProLiant MicroServer Gen10 User Manual

Retaining the recovery key/password

About this task
The recovery key/password is generated during BitLocker setup, and can be saved and printed after
BitLocker is enabled. When using BitLocker, always retain the recovery key/password. The recovery key/
password is required to enter Recovery Mode after BitLocker detects a possible compromise of system
integrity.
To help ensure maximum security, observe the guidelines listed in the following procedure list when retaining
the recovery key/password.
Procedure
• Always store the recovery key/password in multiple locations.
• Always store copies of the recovery key/password away from the server.
• Do not save the recovery key/password on the encrypted hard drive.

Enabling the Trusted Platform Module

Procedure
1. To access the Aptio Setup Utility, on the enter setup prompt, press the F2 or Del key.
2. Select Advanced > Trusted Computing, and then press the Enter key.
3. Verify that the TPM device name is displayed.
4. To exit the utility, press the Esc key.
The server reboots without user input. During this system reboot, the TPM is enabled.
5. Enable TPM functionality in the OS, such as Microsoft Windows BitLocker or measured boot.
CAUTION:
When a TPM is installed and enabled on the server, data access is locked if you fail to follow the
proper procedures for updating the system or option firmware, replacing the system board, replacing
a hard drive, or modifying OS application TPM settings.
For more information on adjusting TPM usage in BitLocker, see the Microsoft website:
http://technet.microsoft.com/en-us/library/cc732774.aspx
54 Retaining the recovery key/password