Configuring a trusted platform module

摘要

A method includes storing configuration data for a Trusted Platform Module (TPM) in a pre-boot environment such as Unified Extensible Firmware Interface (UEFI), reading the configuration data, and automatically configuring the TPM based upon the configuration data. The configuring includes storing values of TPM parameters in non-volatile memory of the TPM. A method includes UEFI firmware of a circuit board on an assembly line configuring a TPM. An information handling system includes UEFI firmware and a TPM. The UEFI firmware configures the TPM from a configuration file stored in memory of the UEFI firmware.

主权项

1. An information handling system comprising:
a processor; a Trusted Platform Module (TPM); and a first non-volatile memory to store Unified Extensible Firmware Interface (UEFI) system Basic Input/Output System (BIOS) firmware
and data to provision the TPM for operation, execution of the firmware by the processor to:read the data from the first non-volatile memory; andsend commands to the TPM, the commands to provision the TPM based upon the data, the provisioning including storing TPM parameters in a second non-volatile memory within the TPM,wherein the data includes data to provision the TPM for generation of an endorsement key by the TPM, and the provisioning includes the UEFI system BIOS firmware issuing a command to the TPM to generate an endorsement key based upon the data.