Supermicro H13SRA-F User Manual page 87

Hide thumbs Also See for H13SRA-F:

Table of Contents

Chapter 4: UEFI BIOS

Storage Hierarchy (Available when "Security Device Support" is set to Enable)

Select Enabled for TPM Storage Hierarchy support that is intended to be used for non-privacy-

sensitive operations by a platform owner such as an IT professional or the end user. Storage

Hierarchy has an owner policy and an authorization value, both of which can be set and are

held constant (-rarely changed) through reboots. This hierarchy can be cleared or changed

independently of the other hierarchies. The options are Disabled and Enabled.

Endorsement Hierarchy (Available when "Security Device Support" is set to Enable)

Select Enabled for Endorsement Hierarchy support, which contains separate controls to

address the user's privacy concerns because the primary keys in the hierarchy are certified

by the TPM key or by a manufacturer with restrictions on how an authentic TPM device that is

attached to an authentic platform can be accessed and used. A primary key can be encrypted

and certified with a certificate created by using TPM2_ ActivateCredential, which allows the

user to independently enable "flag, policy, and authorization values" without involving other

hierarchies. A user with privacy concerns can disable the endorsement hierarchy while still

using the storage hierarchy for TPM applications, permitting the platform software to use the

TPM. The options are Disabled and Enabled.

AMD fTPM configuration



AMD fTPM Switch

Use this feature to enable/disable AMD CPU fTPM. The options are Route to SPI TPM and

AMD CPU fTPM.

Erase fTPM NV For Factory Reset

When a new CPU is installed, select "Enabled" to reset fTPM. If the system has BitLocker

or an encryption-enable system, then the system will not boot without a recovery key. Select

"Disabled" to keep the previous fTPM record and continue system boot. fTPM will not be

enabled with a new CPU unless fTPM is reset (reinitialized). Swap back to the old CPU to

recover TPM related keys and data. The options are Disabled and Enabled.

Table of Contents

H13sra-tf