SuperServer 1029GQ-T(N/X/V)RT User's Manual
94
Platform Hierarchy (for TPM Version 2.0 and above)
Select Enabled for TPM Platform Hierarchy support which will allow the manufacturer to utilize
initial system boot. This early boot code is shipped with the platform and is included in the
to verify a digital signature in an attempt to manage and control the security of the platform
Enabled and Disabled.
Storage Hierarchy
Select Enabled for TPM Storage Hierarchy support hat is intended to be used for non-privacy-
sensitive operations by the platform owner such as an IT professional or the end user. Storage
Hierarchy has an owner policy and an authorization value, both of which can be set and are
held constant (-rarely changed) through reboots. This hierarchy can be cleared or changed
independently of the other hierarchies. The options are Enabled and Disabled.
Endorsement Hierarchy
Select Enabled for Endorsement Hierarchy support, which contains separate controls to
by the TPM or a manufacturer to be constrained to an authentic TPM device that is attached
authorization value" wihtout involving other hierarchies. A user with privacy concerns can
disable the endorsement hierarchy while still using the storage hierarchy for TPM applications
and permitting the platform software to use the TPM. The options are Enabled and Disable.
PH (Platform Hierarchy) Randomization (for TPM Version 2.0 and above)
Select Enabled for Platform Hierarchy Randomization support, which is used only during the
platform developemental stage. This feature cannot be enabled in the production platforms.
The options are Disabled and Enabled.
Conguration
Device Select
will restrict support to TPM 1.2 devices, TPM 2.0 will restrict support to 2.0 devices. Auto
will support both, with the default set to TPM 2.0 devices if not found. The options are Auto,
TPM 1.2, and TPM 2.0.
To Next Page
Loading...
