Intel GA-EQ45M-S2 Computer Hardware User Manual


 
GA-EQ45M-S2 Motherboard - 72 -
4-4 Ultra TPM
GIGABYTE's unique Ultra TPM (Trusted Platform Module) features the industry's most advanced hardware-
based data encryption design. With the easy-to-use Ultra TPM user interface, users can store/back up their
TPM keys on a USB flash drive or in the system BIOS. The TPM key(s) will be removed from the computer
after being stored on a USB flash drive (or in the system BIOS), protecting against unauthorized access to the
computer. By simply plugging or unplugging the USB flash drive, users are able to open or close their PSD
files without the hassles of complicated configurations. In addition, Ultra TPM's key backup function allows
users to still have a way to access their data in case the keys are lost.
After creating the password(s) and key(s) associated the TPM, be sure to store them in a secure location and back them
up. Loss of the password(s) or the key(s) will render the files encrypted via the TPM unable to be cracked or read.
Though the TPM delivers the latest data security technology, it does not guarantee data integrity or give
hardware protection. GIGABYTE is not liable for loss of encrypted data as a result of hardware damage.
A. Before installing Ultra TPM, follow the steps below in sequence:
Step 1:
Turn on your computer and enter the BIOS Setup program. Go to Security Chip Configuration and set Security Chip to
Enabled. Then enter Clear Security Chip to clear all settings in the TPM chip. (Refer to Chapter 2, "BIOS Setup," for more
information.) Save changes and then restart your computer.
Step 2:
Install the Infineon TPM driver from the motherboard driver disk (select Infineon TPM Driver).
Step 3:
Install the Ultra TPM utility from the motherboard driver disk (select Ultra TPM).
Encrypted files will become inaccessible after the TPM chip is cleared. Be sure to back up the encrypted files first.
B. Instructions for using Ultra TPM:
1. Before launching Ultra TPM, go to the Infineon Security Platform Settings Tool to initialize the TPM chip and then encrypt
the files you want. (You have to at least set up a Personal Secure Drive (PSD). Refer to the Infineon Security Platform Help
file to see how to set up the PSD.)
2. The Ultra TPM utility appears in the system tray after it is installed. To create a TPM key and save it to USB flash drive(s),
right-click on the Ultra TPM icon
and select Initialize. A screen in Figure 1 will appear. Select a USB flash drive and
click the Enable Backup to BIOS
(Note 1)
check box, or select at least two USB flash drives. Click OK and then enter the user
password
(Note 2)
created with Infineon Security Platform Settings Tool. Click OK to store the key on your USB flash drive or
in the BIOS.
Figure 1
3. To duplicate a TPM key to another USB flash drive, right-click on the Ultra TPM icon and select Duplicate. A screen
in Figure 2 will appear. Select the drive letter of the source USB flash drive and then
select the drive letter of the destination USB flash drive. Click OK to complete.
Figure 2
DO NOT turn off or restart the computer when a TPM key is being created.
After completing the settings and when removing the USB flash drive(s),
the Infineon Security Platform Settings Tool will give the following warning
message, which is normal.
(Note 1) When more than one user stores their TPM keys in the BIOS, the latter key will replace the former key.
(Note 2) If you incorrectly enter the password three times, Ultra TPM will be locked. To be able to enter the password again,
go to the Security Chip Configuration menu in BIOS Setup and then set Security Chip to Enabled/Activate.
(Note 3) If you want to uninstall the Ultra TPM utility, be sure to insert the USB flash drive containing the TPM key into your
computer before the uninstallation.