beautypg.com

Installing the trusted platform module board – HP ProLiant DL385 G6 Server User Manual

Page 42

background image

Hardware options installation 42

Enabling the TPM requires accessing the ROM-Based Setup Utility (RBSU) ("

HP ROM-Based Setup

Utility

" on page

54

). For more information about RBSU, see the HP website

(

http://www.hp.com/support/smartstart/documentation

).

TPM installation requires the use of drive encryption technology, such as the Microsoft® Windows®

BitLocker™ Drive Encryption feature. For more information on BitLocker™, see the Microsoft website

(

http://www.microsoft.com

).

CAUTION:

Always observe the guidelines in this document. Failure to follow these guidelines

can cause hardware damage or halt data access.

When installing or replacing a TPM, observe the following guidelines:

Do not remove an installed TPM. Once installed, the TPM becomes a permanent part of the system
board.

When installing or replacing hardware, HP service providers cannot enable the TPM or the
encryption technology. For security reasons, only the customer can enable these features.

When returning a system board for service replacement, do not remove the TPM from the system
board. When requested, HP Service provides a TPM with the spare system board.

Any attempt to remove an installed TPM from the system board breaks or disfigures the TPM security
rivet. Upon locating a broken or disfigured rivet on an installed TPM, administrators should consider

the system compromised and take appropriate measures to ensure the integrity of the system data.

When using BitLocker™, always retain the recovery key/password. The recovery key/password is
required to enter Recovery Mode after BitLocker™ detects a possible compromise of system integrity.

HP is not liable for blocked data access caused by improper TPM use. For operating instructions, see
the encryption technology feature documentation provided by the operating system.

Installing the Trusted Platform Module board

WARNING:

To reduce the risk of personal injury, electric shock, or damage to the equipment,

remove the power cord to remove power from the server. The front panel Power On/Standby

button does not completely shut off system power. Portions of the power supply and some
internal circuitry remain active until AC power is removed.

WARNING:

To reduce the risk of personal injury from hot surfaces, allow the drives and the

internal system components to cool before touching them.

1.

Power down the server (on page

20

).

2.

Remove the server from the rack, if necessary.

3.

Place the server on a flat, level work surface.

4.

Remove the access panel (on page

21

).

5.

Remove the PCI riser cage (on page

22

).

6.

Remove the air baffle (on page

23

).

CAUTION:

Any attempt to remove an installed TPM from the system board breaks or disfigures

the TPM security rivet. Upon locating a broken or disfigured rivet on an installed TPM,
administrators should consider the system compromised and take appropriate measures to

ensure the integrity of the system data.