Trusted Platform Module - HPE ProLiant MicroServer Gen10 Plus v2 User Manual

Item Item Description Description
1 iLO dedicated network module slot
2 PCIe4 x16 expansion slot

Trusted Platform Module 2.0

Trusted Platform Module 2.0
The Trusted Platform Module 2.0 (TPM) is a hardware-based system security feature that securely store artifacts used to authenticate the
platform. These artifacts can include passwords, certificates, and encryption keys.
The TPM 2.0 is embedded on the server system board.
The TPM 2.0 is supported with specific operating system support such as Microsoft Windows Server 2012 R2 and later. For more
information about operating system support, see the product QuickSpecs on the Hewlett Packard Enterprise website
(https://www.hpe.com/info/qs https://www.hpe.com/info/qs). For more information about Microsoft Windows BitLocker Drive Encryption feature, see the Microsoft
website (https://www.microsoft.com https://www.microsoft.com).
Subtopics Subtopics
Trusted Platform Module 2.0 guidelines Trusted Platform Module 2.0 guidelines
BitLocker recovery key/password retention guidelines BitLocker recovery key/password retention guidelines
Trusted Platform Module 2.0 guidelines Trusted Platform Module 2.0
CAUTION: CAUTION:
Always observe the TPM guidelines in this section. Failure to follow these guidelines can cause hardware damage or
halt data access.
If you do not follow procedures for modifying the server and suspending or disabling the TPM in the OS, an OS that is
using TPM might lock all data access. This includes updating system or option firmware, replacing hardware such as the
system board and drives, and modifying TPM OS settings.
Changing the TPM mode after installing an OS might cause problems, including loss of data.
Hewlett Packard Enterprise SPECIAL REMINDER: Hewlett Packard Enterprise SPECIAL REMINDER: Before enabling TPM functionality on this system, you must ensure that your intended use
of TPM complies with relevant local laws, regulations and policies, and approvals or licenses must be obtained if applicable.
When the embedded TPM is enabled:
In UEFI boot mode, the Trusted Platform Module operates in TPM 2.0 mode.
In legacy boot mode, the Trusted Platform Module operation is not supported.
Use the UEFI System Utilities to configure the TPM. From the System Utilities screen, select System Configuration > BIOS/Platform
Configuration (RBSU) > Server Security > Trusted Platform Module options. For more information, see the UEFI user guide:
https://www.hpe.com/support/UEFIGen10-UG-en https://www.hpe.com/support/UEFIGen10-UG-en
Supported option Supported option
Install the iLO enablement option here.
Install a half-height, half-length (low-profile) PCIe4 expansion card here.
For list of supported expansion options, see the product QuickSpecs on the
server website at https://www.hpe.com/servers/microserver-gen10-plus-v2
guidelines
https://www.hpe.com/servers/microserver-gen10-plus-v2.
HPE ProLiant MicroServer Gen10 Plus v2 User Guide 16