Serial Ata Flash Module (Optional); 8Hp Expansion Module; Trusted Platform Module 1.2 (On Request) - Kontron CP3002 User Manual

CP3002
The SPI boot flash includes a hardware write protection option, which can be configured via the
uEFI BIOS. If write protection is enabled, the SPI boot flash cannot be written to.
Note ...
The uEFI BIOS code and settings are stored in the SPI boot flashes. Changes
made to the uEFI BIOS settings are available only in the currently selected SPI
boot flash.Thus, switching over to the other SPI boot flash may result in opera-
tion with different uEFI BIOS code and settings.
2.8.2

Serial ATA Flash Module (Optional)

The 4HP CP3002 supports up to 16 GB of Serial ATA flash memory in combination with an
optional Serial ATA Flash module, which is connected to the onboard connector J5. The SATA
Flash module cannot be used in conjunction with the CP3002-HDD module.
The Serial ATA Flash module is an SLC-based SATA NAND flash drive with a built-in full hard-
disk emulation and a high data transfer rate (sustained read rate with up to 50 MB/s and sus-
tained write rate with up to 45 MB/s). It is optimized for embedded systems providing high per-
formance, reliability and security.
Note ...
Write protection is available for the SATA Flash module. Please contact Kon-
tron for further assistance if write protection is required.
2.9

8HP Expansion Module

The CP3002 supports the CP3002-HDD as an optional 8HP expansion module via the 120-pin
high-speed I/O extension connector J12. This module cannot be used in conjunction with the
SATA Flash module. For further information regarding the CP3002-HDD module, refer to Appen-
dix A.
2.10

Trusted Platform Module 1.2 (On Request)

The CP3002 has been designed to support the Trusted Platform Module (TPM) 1.2. This fea-
ture is available on request. TPM1.2 is a security chip specifically designed to provide en-
hanced hardware- and software-based data and system security. It stores sensitive data such
as encryption and signature keys, certificates and passwords, and is able to withstand software
attacks to protect the stored information.
Hardware features of the TPM 1.2:
• TCG 1.2 compliant Trusted Platform Module (TPM)
• Security architecture based on the Infineon SLE66CXxxPE security controller family
• EEPROM for TCG firmware enhancements and for user data and keys
• Advanced Crypto Engine (ACE) with RSA support up to 2048-bit key length
• Hardware accelerator for SHA-1 hash algorithm
• True Random Number Generator (TRNG)
• Tick counter with tamper detection
• Protection against Dictionary Attack
• Intel® Trusted Execution Technology Support
• Full personalization with Endorsement Key (EK) and EK certificate
ID 1042-9252, Rev. 2.0
Functional Description
Page 2 - 7