Installing And Enabling A Trusted Platform Module - Cisco UCS B420 M3 Installation And Service Note

Installing and Enabling a Trusted Platform Module

The Trusted Platform Module (TPM) is a component that can securely store artifacts used to authenticate the server. These artifacts
can include passwords, certificates, or encryption keys. A TPM can also be used to store platform measurements that help ensure that
the platform remains trustworthy. Authentication (ensuring that the platform can prove that it is what it claims to be) and attestation
(a process helping to prove that a platform is trustworthy and has not been breached) are necessary steps to ensure safer computing
in all environments. It is a requirement for the Intel Trusted Execution Technology (TXT) security feature, which must be enabled
in the BIOS settings for a server equipped with a TPM.
TPM installation is supported after-factory. However, a TPM installs with a one-way screw and cannot
Note
be replaced or moved to another server. If a server with a TPM is returned, the replacement server must
be ordered with a new TPM.
Procedure
Step 1 Install the TPM hardware.
a) Power off, decommission, and remove the blade server from the chassis.
b) Remove the blade server cover.
c) Install the TPM to the TPM socket on the server motherboard and secure it using the one-way screw that is provided.
See the figure below for the location of the TPM socket.
d) Return the blade server to the chassis, power it on, and allow it to be automatically reacknowledged, reassociated, and
recommissioned.
31