Installing A Trusted Platform Module Board - HP ProLiant ML30 Gen9 User Manual

Use these instructions to install and enable a TPM on a supported server. This procedure includes three
sections in the following chapter:
• Installing the Trusted Platform Module board.
• Retaining the recovery key/password.
• Enabling the Trusted Platform Module.
Enabling the TPM requires accessing the BIOS/Platform Configuration 9RBSU0 in the UEFI System
Utilities.
TPM installation requires the use of drive encryption technology, such as the Microsoft Windows BitLocker
Drive Encryption feature. For more information on BitLocker, see the Microsoft website.
CAUTION:
Always observe the guidelines in this document. Failure to follow these guidelines can cause hardware
damage or halt data access.
When installing or replacing TPM, observer the following guidelines:
• Do not remove an installed TPM. Once installed, the TPM becomes a permanent part of the system board.
• When installing or replacing hardware, Hewlett Packard Enterprise service providers cannot enable the
TPM or the encryption technology. For security reasons, only the customer can enable these features.
• When returning a system board for service replacement, do not remove the TPM from the system board.
When requested, Hewlett Packard Enterprise Service provides a TPM with the spare system board.
• Any attempt to remove an installed TPM from the system board breaks or disfigures the TPM security
rivet. Upon locating a broken or disfigured rivet on an installed TPM, administrators should consider the
system compromised and take appropriate measures to ensure the integrity of the system data.
• When using BitLocker, always retain the recovery key/password. The recovery key/password is required to
enter Recovery Mode after BitLocker detects a possible compromise of system integrity.
• Hewlett Packard Enterprise is not liable for blocked data access caused by improper TPM use. For
operating instructions, see the encryption technology feature documentation provided by the operating
system.

Installing a Trusted Platform Module board

WARNING:
To reduce the risk of personal injury from hot surfaces, allow the drives and the internal system
components to cool before touching them.
CAUTION:
Any attempt to remove an installed TPM from the system board breaks or disfigures the TPM security
rivet. Upon locating a broken or disfigured rivet on an installed TPM, administrators should consider the
system compromised and take appropriate measures to ensure the integrity of the system data.
Procedure
1. Power down the server.
2. Disconnect the power cord from the power source and the server.
3. Remove the bezel.
4. Place the server on its side with the access panel facing up.
5. Remove the access panel.
6. Remove the air baffle.
7. Install the TPM board by pressing the board into the connector.
For the location of the TPM connector, see "System board components."
Installing a Trusted Platform Module board 69