Retaining The Recovery Key/Password; Enabling The Trusted Platform Module - HP ProLiant DL320e Gen8 v2 User Manual

Retaining the recovery key/password

The recovery key/password is generated during BitLocker setup, and can be saved and printed after
BitLocker is enabled. When using BitLocker, always retain the recovery key/password. The recovery
key/password is required to enter Recovery Mode after BitLocker detects a possible compromise of system
integrity.
To help ensure maximum security, observe the following guidelines when retaining the recovery
key/password:
•
Always store the recovery key/password in multiple locations.
•
Always store copies of the recovery key/password away from the server.
•
Do not save the recovery key/password on the encrypted hard drive.

Enabling the Trusted Platform Module

When prompted during the start-up sequence, access RBSU by pressing the F9 key.
1.
From the Main Menu, select Server Security.
2.
From the Server Security Menu, select Trusted Platform Module.
3.
From the Trusted Platform Module Menu, select TPM Functionality.
4.
Select Enable, and then press the Enter key to modify the TPM Functionality setting.
5.
Press the Esc key to exit the current menu, or press the F10 key to exit RBSU.
6.
Reboot the server.
7.
Enable the TPM in the OS. For OS-specific instructions, see the OS documentation.
8.
CAUTION:
to follow the proper procedures for updating the system or option firmware, replacing the system
board, replacing a hard drive, or modifying OS application TPM settings.
For more information on firmware updates and hardware procedures, see the HP Trusted Platform Module
Best Practices White Paper on the HP website (http://www.hp.com/support).
For more information on adjusting TPM usage in BitLocker™, see the Microsoft website
(http://technet.microsoft.com/en-us/library/cc732774.aspx).
When a TPM is installed and enabled on the server, data access is locked if you fail
Hardware options installation 54