Installing A Trusted Platform Module (Tpm) And Tpm Security Rivet - HPE Integrity rx2800 i2 series User's & Service Manual

CAUTION:
Any attempt to remove an installed TPM from the system board breaks or disfigures the TPM
security rivet. Upon locating a broken or disfigured rivet on an installed TPM, administrators should
consider the system compromised and take appropriate measures to ensure the integrity of the
system data.
If you suspect a TPM board failure, leave the TPM installed and remove the system board (Removing
and replacing the system board on page 171). Contact a Hewlett Packard Enterprise authorized
service provider for a replacement system board and TPM board.

Installing a Trusted Platform Module (TPM) and TPM security rivet

The TPM is an optional security component which enhances security capabilities for the server running
the HP-UX operating system. The TPM is a security chip that is unique to the server. It performs key
security processes independent of other hardware components. The TPM creates and stores additional
encryption keys from the root key of the system. The encryption keys created by the TPM encapsulate
system application encryption keys to provide an additional layer of security for sensitive system data.
TPM installation requires the use of drive encryption technology.
WARNING:
Once the TPM is installed on your system board, it cannot be removed. If the TPM fails, the system
board needs to be replaced. Attempting to remove the TPM from the system board will void any
existing Hewlett Packard Enterprise service contract and cause the server to fail.
WARNING:
To reduce the risk of personal injury, electric shock, or damage to the equipment, remove the power
cord to remove power from the server. The front panel Power On/Standby button does not
completely shut off system power. Portions of the power supply and some internal circuitry remain
active until AC power is removed.
CAUTION:
Always observe the guidelines in this document. Failure to follow these guidelines can cause
hardware damage or halt data access.
When installing a TPM, observe the following guidelines:
Procedure
1. Always enable the TPM and ensure that the TPM is recognized by the system before installing the
TPM security rivet.
2. When installing or replacing hardware, Hewlett Packard Enterprise service providers cannot enable
the TPM or the encryption technology. For security reasons, only the customer can enable these
features.
3. When returning a system board for service replacement, do not remove the TPM from the system
board. When requested, Hewlett Packard Enterprise Service will provide a TPM with the spare system
board.
4. Any attempt to remove an installed TPM from the system board breaks or disfigures the TPM security
rivet. Upon locating a broken or disfigured rivet on an installed TPM, consider the system
compromised and take appropriate measures to ensure the integrity of the system data.
76 Installing a Trusted Platform Module (TPM) and TPM security rivet