Table of Contents
Advertisement
by the TPM or a manufacturer to be constrained to an authentic TPM device that is attached
to an authentic platform. A primary key can be an encrypted, and a certificate can be created
using TPM2_ ActivateCredential. It allows the user to independently enable "flag, policy, and
authorization value" without involving other hierarchies. A user with privacy concerns can
disable the endorsement hierarchy while still using the storage hierarchy for TPM applications
and permitting the platform software to use the TPM. The options are Enabled and Disabled.
PH (Platform Hierarchy) Randomization (for TPM Version 2.0 and above)
Select Enabled for Platform Hierarchy Randomization support, which is used only during the
platform developmental stage. This feature cannot be enabled in the production platforms.
The options are Disabled and Enabled.
SMCI BIOS-Based TPM Provision Support
Use feature to enable the Supermicro TPM Provision support.The default option is Disabled
if SMCI BIOS-Based TPM Provision Support item is "Official"; the default option is Enabled
if SMCI BIOS-Based TPM Provision Support item is "Beta".
TXT Support
Select Enabled to enable Intel Trusted Execution Technology (TXT) support to enhance
system security and data integrity. The options are Disabled and Enabled.
Note 1: If the option for this item (TXT Support) is set to Enabled, be sure to disable
EV DFX (Device Function On-Hide) support for the system to work properly. (EV DFX
is under "IIO Configuration" in the "Chipset/North Bridge" submenu).
Note 2: For more information on TPM, please refer to the TPM manual at http://www.
supermicro.com/manuals/other.
TlS Authenticate Configuration
When this submenu is selected, the following items will be displayed:
Server CA Configuration
This feature allows the user to configure the client certificate that is to be used by the server.
Enroll Certification
This feature allows the user to enroll the certificate in the system.
Enroll Cert (Certification) Using File
This feature allows the user to enroll the security certificate in the system by using a file.
107
Chapter 4: UEFI BIOS
Hide quick links:
Advertisement
Table of Contents
