Supermicro AOM-TPM-9670V Manual de usuario
TPM for X11
AOM-TPM-9670V
AOM-TPM-9670H
AOM-TPM-9670V(H)-S
USER’S MANUAL
1.2a
Manual Revision 1.2a
Release Date: October 13, 2022
Unless you request and receive written permission from Super Micro Computer, Inc., you may not
copy any part of this document.
Information in this document is subject to change without notice. Other products and companies
referred to herein are trademarks or registered trademarks of their respective companies or mark
holders.
Copyright © 2022 by Super Micro Computer, Inc.
All rights reserved.
Printed in the United States of America
The information in this user’s guide has been carefully reviewed and is believed to be accurate.
The vendor assumes no responsibility for any inaccuracies that may be contained in this document,
and makes no commitment to update or to keep current the information in this manual, or to notify
any person or organization of the updates. Please Note: For the most up-to-date version of this
manual, please see our web site at www.supermicro.com.
Super Micro Computer, Inc. ("Supermicro") reserves the right to make changes to the product
described in this manual at any time and without notice. This product, including software and docu-
mentation, is the property of Supermicro and/or its licensors, and is supplied only under a license.
Any use or reproduction of this product is not allowed, except as expressly permitted by the terms
of said license.
IN NO EVENT WILL SUPER MICRO COMPUTER, INC. BE LIABLE FOR DIRECT, INDIRECT,
SPECIAL, INCIDENTAL, SPECULATIVE OR CONSEQUENTIAL DAMAGES ARISING FROM THE
USE OR INABILITY TO USE THIS PRODUCT OR DOCUMENTATION, EVEN IF ADVISED OF
THE POSSIBILITY OF SUCH DAMAGES. IN PARTICULAR, SUPER MICRO COMPUTER, INC.
SHALL NOT HAVE LIABILITY FOR ANY HARDWARE, SOFTWARE, OR DATA STORED OR USED
WITH THE PRODUCT, INCLUDING THE COSTS OF REPAIRING, REPLACING, INTEGRATING,
INSTALLING OR RECOVERING SUCH HARDWARE, SOFTWARE, OR DATA.
Any disputes arising between manufacturer and customer shall be governed by the laws of Santa
Clara County in the State of California, USA. The State of California, County of Santa Clara shall
be the exclusive venue for the resolution of any such disputes. Supermicro's total liability for all
claims will not exceed the price paid for the hardware product.
FCC Statement: Refer to Supermicro's website for FCC Compliance Information.
California Best Management Practices Regulations for Perchlorate Materials: This Perchlorate
warning applies only to products containing CR (Manganese Dioxide) Lithium coin cells. “Perchlorate
Material-special handling may apply. See www.dtsc.ca.gov/hazardouswaste/perchlorate”.
WARNING: This product can expose you to chemicals including
lead, known to the State of California to cause cancer and birth
defects or other reproduc�veharm. Formore informa�on, go
to www.P65Warnings.ca.gov.
!
Preface
About This User's Guide
This user's guide is written for system integrators, IT professionals, and knowl-
edgeable end users who wish to add additional data security mechanisms to their
systems to protect highly sensitive applications. It provides detailed information on
conguring, provisioning, and using the Trusted Platform Module (TPM).
User's Guide Organization
Chapter 1 provides an overview of the TPM, including its features and uses.
Chapter 2 provides detailed instructions on installing, provisioning, and using the
TPM.
Conventions Used in This User's Guide
Pay special attention to the following symbols for proper TPM conguration.
Warning: Important information given to avoid TPM conguration errors.
Note: Additional information given to ensure correct and proper TPM
conguration setup.
iii
Preface
Super TPM User's Guide
iv
Contacting Supermicro
Headquarters
Address: Super Micro Computer, Inc.
980 Rock Ave.
San Jose, CA 95131 U.S.A.
Tel: +1 (408) 503-8000
Fax: +1 (408) 503-8008
Email: [email protected] (General Information)
Inquiries)
[email protected] (Webmaster)
Website: www.supermicro.com
Europe
Address: Super Micro Computer B.V.
Het Sterrenbeeld 28, 5215 ML
's-Hertogenbosch, The Netherlands
Tel: +31 (0) 73-6400390
Fax: +31 (0) 73-6416525
Email: [email protected] (Sales Inquiries)
Website: www.supermicro.nl
Asia-Pacic
Address: Super Micro Computer, Inc.
3F, No. 150, Jian 1st Rd.
Zhonghe Dist., New Taipei City 235
Taiwan (R.O.C)
Tel: +886-(2) 8226-3990
Fax: +886-(2) 8226-3992
vi
Table of Contents
Preface........................................................................................................... 3
Chapter 1 Introduction..............................................................................1-1
1.1 Overview of the Trusted Platform Module (TPM) ........................................... 1-1
1.2 Supermicro TPM Features .............................................................................. 1-2
1.3 Motherboards Supported for TPM .................................................................. 1-3
1.4 Intel®TXT ........................................................................................................ 1-3
Chapter 2 Deploying and Using the TPM ............................................... 2-1
2.1 Installing the TPM Onto the Motherboard....................................................... 2-1
2.2 Enabling the TPM via the BIOS and Intel®Provision Utility ........................... 2-2
2.3 An Important Note to the User........................................................................ 2-9
Super TPM User's Guide
Chapter 1: Introduction
1-1
Chapter 1
Introduction
1.1 Overview of the Trusted Platform Module (TPM)
The Trusted Platform Module (TPM9670) is a special add-on module that may be
installed onto Supermicro X11 dual and single processor motherboards that support
CPU Socket 3674 only.
Types of TPMs
Note: TPM module must be provisioned in order to support Intel®Trusted
Execution Technology (TXT). Please contact Supermicro Technical Sup-
port to get more details about the Intel tool.
The TPM-9670 series add-on modules use TCG (Trusted Computing Group) ver-
sion 2.0 rmware.
The following SKUs are available:
• AOM-TPM-9670V, a vertical TPM module
• AOM-TPM-9670H, a horizontal TPM module
Horizontal vs. Vertical: Generally, whether you should use a TPM with a horizontal
or vertical form factor depends on the physical space available. Horizontal TPMs
are used in 1U chassis. Vertical TPMs are used in 2U or taller chassis, which are
designed with a smaller footprint to occupy less space on the motherboard.
Server vs. Client: To use the TXT function, each TPM has been provisioned as a
server model or client model. Be sure to use the appropriate TPM for your needs.
Both server TPM and client TPM are designed to support motherboards with Socket
P (LGA3647) processors installed.
Super TPM User's Manual
1-2
1.2 Supermicro TPM Features
1. TCG 2.0 compliance
2. SPI interface
3. Microcontroller in 0.22/0.09-µm CMOS technology
4. Compliant embedded software
5. EEPROM for TCG rmware enhancements and for user data and key support
6. Hardware accelerator for SHA-1 and SHA-256 hash algorithm
7. True Random Number Generator (TRNG)
8. Tick counter with tamper detection
9. Protection against dictionary attack
10. Inneon's TPM 2.0 is Common Criteria (CC) certied at Evaluation Assurance
Level (EAL) 4 Moderate
11. General-purpose I/O
12. Intel®Trusted Execution Technology (TXT) support
13. AMD®Secure Virtual Machine Architecture support
14. Full personalization with Endorsement Key (EK) and EK certicate
15. Power-saving sleep mode
16. 3.3V power supply
17. WHQL dual-mode 1.1b + 1.2 TPM Windows Kernel Mode Driver
Chapter 1: Introduction
1-3
1.3 Motherboards Supported for TPM
Please refer to the Supermicro website (http://www.supermicro.com/) for a complete
and most up-to-date list of the motherboards that can support the TPM. As a general
rule, besides the X11 motherboards, the list includes most X9 motherboards, all
X10 motherboards, and some AMD motherboards. These motherboards will come
with a specially designated JTPM1 connector on every board, which will be listed
in the respective motherboard's manual.
1.4 Intel®TXT
The Intel Trusted Execution Technology (TXT) is a software tool that may be used
in conjunction with the TPM to provide additional security for pre-launch rmware
of clusters and clouds, including but not limited to the BIOS, IPMI, SAS rmware,
and CMM rmware. It is optional, but the TPM is required for it to be provisioned.
It will further enhance system security by protecting rmware against malicious
attacks on vulnerable areas.
It works by matching hypervisor measures with encryption keys upon system launch.
If the hypervisor does not match the keys, the hypervisor will be prevented from
starting up.
To use the TXT, you need to enable TXT support after provisioning the TPM.
Note: TXT is only supported on Intel platforms that support TPM use.
How the TXT Works
The Intel TXT, when enabled, follows a step-by-step process to ensure the security
of pre-launch components.
1. Measures the hypervisor launch upon system startup
2. Checks for a match
3. If matched: The TXT signals "trusted," and the launch is allowed to proceed.
4. If mismatched: The TXT signals "untrusted," and the launch is blocked.
Chapter 2: Deploying and Using the TPM
2-1
Chapter 2
Deploying and Using the TPM
Follow the instructions below to begin using the TPM.
2.1 Installing the TPM Onto the Motherboard
To install the Trusted Platform Module onto your motherboard, follow the steps
below.
1. Find the 9-pin male JTPM1 connector on the motherboard. If you need help
locating this connector, consult your motherboard manual. If the board does
not have this feature, then it does not support the TPM.
2. Using the key pin as a reference, orient, and align your TPM with the connec-
tor.
key pin
3. Carefully insert the TPM into the connector on the motherboard, making sure
not to damage the pins.
Note: The orientation of the TPM to be installed depends on whether it
has a horizontal or vertical form factor. The vertical TPM is intended to
"stand" perpendicular to the motherboard, while the horizontal TPM lies
at (parallel) on the motherboard. See the below two images for the cor-
rect orientation.
Horizontal TPM Vertical TPM
Este manual sirve para los siguientes modelos
3
Tabla de contenidos
Otros manuales de Unidad de control de Supermicro
Supermicro
Supermicro MicroBlade MBI-6119M-C2 Manual de usuario
Supermicro
Supermicro MicroBlade MBI-6119G-C4 Manual de usuario
Supermicro
Supermicro MicroBlade 6119M-T2N Manual de usuario
Supermicro
Supermicro SBA-7141M-T Manual de usuario
Supermicro
Supermicro SuperBlade SBI-4119MG-X Manual de usuario
Supermicro
Supermicro AOC-A100G-b2CM Manual de usuario
Supermicro
Supermicro SBI-6119P-C3N Manual de usuario
Supermicro
Supermicro MicroBlade MBI-6219G-T8HX Manual de usuario
Supermicro
Supermicro MicroBlade MBI-6219G-T7LX Manual de usuario
Supermicro
Supermicro AOC-AH25G-m2S2TM Manual de usuario
Supermicro
Supermicro SuperBlade SBI-6419P-C3N Manual de usuario
Supermicro
Supermicro TPM9670 Manual de usuario
Supermicro
Supermicro Supero SAS-836TQ Manual de usuario
Supermicro
Supermicro MicroBlade MBI-6118G-T81X Manual de usuario
Supermicro
Supermicro SBI-7126TG Manual de usuario
Supermicro
Supermicro AOC-ATG-i2S Manual de usuario
Supermicro
Supermicro MicroBlade MBI-6118G-T41X Manual de usuario
Supermicro
Supermicro SuperBlade SBI-7228R-T2F2 Manual de usuario
Supermicro
Supermicro SBI-7228R-T2X Manual de usuario
Supermicro
Supermicro SuperBlade SBI-6119P-T3N Manual de usuario
Manuales populares de Unidad de control de otras marcas
Festo
Festo Compact Performance CP-FB6-E Manual de lista de piezas
Elo TouchSystems
Elo TouchSystems DMS-SA19P-EXTME Manual de usuario
JS Automation
JS Automation MPC3034A Manual de usuario
JAUDT
JAUDT SW GII 6406 Series Guía rápida
Spektrum
Spektrum Air Module System Manual de usuario
BOC Edwards
BOC Edwards Q Series Manual de usuario
