Supermicro AOM-TPM-9670V Manuale utente

TPM for X11

AOM-TPM-9670V

AOM-TPM-9670H

AOM-TPM-9670V(H)-S

USER’S MANUAL

1.2a

Manual Revision 1.2a

Release Date: October 13, 2022

Unless you request and receive written permission from Super Micro Computer, Inc., you may not

copy any part of this document.

Information in this document is subject to change without notice. Other products and companies

referred to herein are trademarks or registered trademarks of their respective companies or mark

holders.

Printed in the United States of America

The information in this user’s guide has been carefully reviewed and is believed to be accurate.

The vendor assumes no responsibility for any inaccuracies that may be contained in this document,

and makes no commitment to update or to keep current the information in this manual, or to notify

any person or organization of the updates. Please Note: For the most up-to-date version of this

manual, please see our web site at www.supermicro.com.

Super Micro Computer, Inc. ("Supermicro") reserves the right to make changes to the product

described in this manual at any time and without notice. This product, including software and docu-

mentation, is the property of Supermicro and/or its licensors, and is supplied only under a license.

Any use or reproduction of this product is not allowed, except as expressly permitted by the terms

of said license.

IN NO EVENT WILL SUPER MICRO COMPUTER, INC. BE LIABLE FOR DIRECT, INDIRECT,

SPECIAL, INCIDENTAL, SPECULATIVE OR CONSEQUENTIAL DAMAGES ARISING FROM THE

USE OR INABILITY TO USE THIS PRODUCT OR DOCUMENTATION, EVEN IF ADVISED OF

THE POSSIBILITY OF SUCH DAMAGES. IN PARTICULAR, SUPER MICRO COMPUTER, INC.

SHALL NOT HAVE LIABILITY FOR ANY HARDWARE, SOFTWARE, OR DATA STORED OR USED

WITH THE PRODUCT, INCLUDING THE COSTS OF REPAIRING, REPLACING, INTEGRATING,

INSTALLING OR RECOVERING SUCH HARDWARE, SOFTWARE, OR DATA.

Any disputes arising between manufacturer and customer shall be governed by the laws of Santa

Clara County in the State of California, USA. The State of California, County of Santa Clara shall

be the exclusive venue for the resolution of any such disputes. Supermicro's total liability for all

claims will not exceed the price paid for the hardware product.

FCC Statement: Refer to Supermicro's website for FCC Compliance Information.

California Best Management Practices Regulations for Perchlorate Materials: This Perchlorate

warning applies only to products containing CR (Manganese Dioxide) Lithium coin cells. “Perchlorate

Material-special handling may apply. See www.dtsc.ca.gov/hazardouswaste/perchlorate”.

WARNING: This product can expose you to chemicals including

lead, known to the State of California to cause cancer and birth

defects or other reproduc�veharm. Formore informa�on, go

to www.P65Warnings.ca.gov.

Preface

About This User's Guide

This user's guide is written for system integrators, IT professionals, and knowl-

edgeable end users who wish to add additional data security mechanisms to their

systems to protect highly sensitive applications. It provides detailed information on

conguring, provisioning, and using the Trusted Platform Module (TPM).

User's Guide Organization

Chapter 1 provides an overview of the TPM, including its features and uses.

Chapter 2 provides detailed instructions on installing, provisioning, and using the

TPM.

Conventions Used in This User's Guide

Pay special attention to the following symbols for proper TPM conguration.

Warning: Important information given to avoid TPM conguration errors.

Note: Additional information given to ensure correct and proper TPM

conguration setup.

iii

Preface

Super TPM User's Guide

Contacting Supermicro

Headquarters

Address: Super Micro Computer, Inc.

980 Rock Ave.

San Jose, CA 95131 U.S.A.

Tel: +1 (408) 503-8000

Fax: +1 (408) 503-8008

Email: [email protected] (General Information)

[email protected] (Sales Inquiries)

[email protected] (Gov. Sales

Inquiries)

[email protected] (Technical Support)

[email protected] (RMA Support)

[email protected] (Webmaster)

Website: www.supermicro.com

Europe

Address: Super Micro Computer B.V.

Het Sterrenbeeld 28, 5215 ML

's-Hertogenbosch, The Netherlands

Tel: +31 (0) 73-6400390

Fax: +31 (0) 73-6416525

Email: [email protected] (Sales Inquiries)

[email protected] (Technical Support)

[email protected] (RMA Support)

Website: www.supermicro.nl

Asia-Pacic

Address: Super Micro Computer, Inc.

3F, No. 150, Jian 1st Rd.

Zhonghe Dist., New Taipei City 235

Taiwan (R.O.C)

Tel: +886-(2) 8226-3990

Fax: +886-(2) 8226-3992

Asia-Pacic

Email: [email protected] (Sales Inquiries)

[email protected] (Technical Support)

[email protected] (RMA Support)

Website: www.supermicro.com.tw

Preface

Table of Contents

Preface........................................................................................................... 3

Chapter 1 Introduction..............................................................................1-1

1.1 Overview of the Trusted Platform Module (TPM) ........................................... 1-1

1.2 Supermicro TPM Features .............................................................................. 1-2

1.3 Motherboards Supported for TPM .................................................................. 1-3

1.4 Intel®TXT ........................................................................................................ 1-3

Chapter 2 Deploying and Using the TPM ............................................... 2-1

2.1 Installing the TPM Onto the Motherboard....................................................... 2-1

2.2 Enabling the TPM via the BIOS and Intel®Provision Utility ........................... 2-2

2.3 An Important Note to the User........................................................................ 2-9

Super TPM User's Guide

Chapter 1: Introduction

1-1

Chapter 1

Introduction

1.1 Overview of the Trusted Platform Module (TPM)

The Trusted Platform Module (TPM9670) is a special add-on module that may be

installed onto Supermicro X11 dual and single processor motherboards that support

CPU Socket 3674 only.

Types of TPMs

Note: TPM module must be provisioned in order to support Intel®Trusted

Execution Technology (TXT). Please contact Supermicro Technical Sup-

port to get more details about the Intel tool.

The TPM-9670 series add-on modules use TCG (Trusted Computing Group) ver-

sion 2.0 rmware.

The following SKUs are available:

• AOM-TPM-9670V, a vertical TPM module

• AOM-TPM-9670H, a horizontal TPM module

Horizontal vs. Vertical: Generally, whether you should use a TPM with a horizontal

or vertical form factor depends on the physical space available. Horizontal TPMs

are used in 1U chassis. Vertical TPMs are used in 2U or taller chassis, which are

designed with a smaller footprint to occupy less space on the motherboard.

Server vs. Client: To use the TXT function, each TPM has been provisioned as a

server model or client model. Be sure to use the appropriate TPM for your needs.

Both server TPM and client TPM are designed to support motherboards with Socket

P (LGA3647) processors installed.

Super TPM User's Manual

1-2

1.2 Supermicro TPM Features

1. TCG 2.0 compliance

2. SPI interface

3. Microcontroller in 0.22/0.09-µm CMOS technology

4. Compliant embedded software

5. EEPROM for TCG rmware enhancements and for user data and key support

6. Hardware accelerator for SHA-1 and SHA-256 hash algorithm

7. True Random Number Generator (TRNG)

8. Tick counter with tamper detection

9. Protection against dictionary attack

10. Inneon's TPM 2.0 is Common Criteria (CC) certied at Evaluation Assurance

Level (EAL) 4 Moderate

11. General-purpose I/O

12. Intel®Trusted Execution Technology (TXT) support

13. AMD®Secure Virtual Machine Architecture support

14. Full personalization with Endorsement Key (EK) and EK certicate

15. Power-saving sleep mode

16. 3.3V power supply

17. WHQL dual-mode 1.1b + 1.2 TPM Windows Kernel Mode Driver

Chapter 1: Introduction

1-3

1.3 Motherboards Supported for TPM

Please refer to the Supermicro website (http://www.supermicro.com/) for a complete

and most up-to-date list of the motherboards that can support the TPM. As a general

rule, besides the X11 motherboards, the list includes most X9 motherboards, all

X10 motherboards, and some AMD motherboards. These motherboards will come

with a specially designated JTPM1 connector on every board, which will be listed

in the respective motherboard's manual.

1.4 Intel®TXT

The Intel Trusted Execution Technology (TXT) is a software tool that may be used

in conjunction with the TPM to provide additional security for pre-launch rmware

of clusters and clouds, including but not limited to the BIOS, IPMI, SAS rmware,

and CMM rmware. It is optional, but the TPM is required for it to be provisioned.

It will further enhance system security by protecting rmware against malicious

attacks on vulnerable areas.

It works by matching hypervisor measures with encryption keys upon system launch.

If the hypervisor does not match the keys, the hypervisor will be prevented from

starting up.

To use the TXT, you need to enable TXT support after provisioning the TPM.

Note: TXT is only supported on Intel platforms that support TPM use.

How the TXT Works

The Intel TXT, when enabled, follows a step-by-step process to ensure the security

of pre-launch components.

1. Measures the hypervisor launch upon system startup

2. Checks for a match

3. If matched: The TXT signals "trusted," and the launch is allowed to proceed.

4. If mismatched: The TXT signals "untrusted," and the launch is blocked.

Chapter 2: Deploying and Using the TPM

2-1

Chapter 2

Deploying and Using the TPM

Follow the instructions below to begin using the TPM.

2.1 Installing the TPM Onto the Motherboard

To install the Trusted Platform Module onto your motherboard, follow the steps

below.

1. Find the 9-pin male JTPM1 connector on the motherboard. If you need help

locating this connector, consult your motherboard manual. If the board does

not have this feature, then it does not support the TPM.

2. Using the key pin as a reference, orient, and align your TPM with the connec-

tor.

key pin

3. Carefully insert the TPM into the connector on the motherboard, making sure

not to damage the pins.

Note: The orientation of the TPM to be installed depends on whether it

has a horizontal or vertical form factor. The vertical TPM is intended to

"stand" perpendicular to the motherboard, while the horizontal TPM lies

at (parallel) on the motherboard. See the below two images for the cor-

rect orientation.

Horizontal TPM Vertical TPM

Questo manuale è adatto per i seguenti modelli

Indice

Altri manuali Supermicro Unità di controllo

Supermicro

Supermicro SBI-6129P-T3N Manuale utente

Supermicro

Supermicro MicroBlade MBI-6119G-C2 Manuale utente

Supermicro

Supermicro AOC-ATG-i2S Manuale utente

Supermicro

Supermicro MicroBlade MBI-6219G-T8HX Manuale utente

Supermicro

Supermicro SUPERO C9Z590-CG Manuale utente

Supermicro

Supermicro SBI-4429P-T2N Manuale utente

Supermicro

Supermicro MicroBlade MBI-6119G-C4 Manuale utente

Supermicro

Supermicro MBI-6418A-T5H Manuale utente

Supermicro

Supermicro HK030 Manuale utente

Supermicro

Supermicro MicroBlade MBI-6218G-T41X Manuale utente

Supermicro

Supermicro MBI-6219G-T Manuale utente

Supermicro

Supermicro SuperBlade SBI-6119P-T3N Manuale utente

Supermicro

Supermicro SuperBlade SBI-6419P-C3N Manuale utente

Supermicro

Supermicro Supero SAS-836TQ Manuale utente

Supermicro

Supermicro MBI-6128R-T2 Manuale utente

Supermicro

Supermicro MicroBlade MBI-6119M-T2N Manuale utente

Supermicro

Supermicro SuperBlade SBI-4119MG-X Manuale utente

Supermicro

Supermicro SuperBlade SBI-8149P-C4N Manuale utente

Supermicro

Supermicro TPM9670 Manuale utente

Supermicro

Supermicro SBM-25G-P10 Manuale utente

Supermicro

Supermicro AOC-ATG-i2T2SM Manuale utente

Supermicro

Supermicro MicroBlade MBI-6118G-T41X Manuale utente

Supermicro

Supermicro MicroBlade MBI-6219G-T7LX Manuale utente

Supermicro

Supermicro AOC-MTG-i2T2S Manuale utente

Manuali Unità di controllo popolari di altre marche

Festo

Festo Compact Performance CP-FB6-E Manuale elenco delle parti

Elo TouchSystems

Elo TouchSystems DMS-SA19P-EXTME Manuale utente

JS Automation

JS Automation MPC3034A Manuale utente

JAUDT

JAUDT SW GII 6406 Series Guida rapida

Spektrum

Spektrum Air Module System Manuale utente

BOC Edwards

BOC Edwards Q Series Manuale utente

KHADAS

KHADAS BT Magic Manuale utente

Etherma

Etherma eNEXHO-IL Manuale utente

PMFoundations

PMFoundations Attenuverter Manuale utente

GEA

GEA VARIVENT Manuale utente

Walther Systemtechnik

Walther Systemtechnik VMS-05 Manuale utente

Altronix

Altronix LINQ8PD Istruzioni per il montaggio

Eaton

Eaton Powerware Series Manuale utente

WAGO

WAGO 750-407/040-000 Manuale utente

Sony

Sony CCU-590 Manuale utente

Graco

Graco 25D614 Manuale utente

Task Force Tips

Task Force Tips YE-RF-900 Manuale di programmazione

Shini

Shini SPV-U Series Manuale utente