Supermicro AOM-TPM-9665H-S TPM Module

Supermicro AOM-TPM-9665H(-S/-C) is a TCG 2.0 compliant Trusted Platform Module (TPM) designed to store cryptographic keys, passwords and digital certificates, and to provide platform-level protection against external software attacks and physical theft. The module implements a Root-of-Trust that operates during system boot to collect measurements of the running environment and operating system for trusted reporting.

Advantages

The TPM enhances system security by protecting key material and cryptographic operations, enabling secure application execution, safer remote access environments, and more secure electronic transactions and digital communications. It supports hardware-based cryptographic functions and tamper-detection features to reduce the risk of key disclosure or manipulation.

Key specifications

• TCG 2.0 compliant Trusted Platform Module
• Microcontroller in 0.22/0.09 µm CMOS technology
• Compliant embedded software
• EEPROM for TCG firmware enhancements and user data/keys
• Hardware accelerator for SHA-1 and SHA-256
• True Random Number Generator (TRNG)
• Tick counter with tamper detection
• Protection against dictionary attack
• General purpose input/output (GPIO)
• Intel® Trusted Execution Technology (TXT) support
• Full personalization with Endorsement Key (EK) and EK certificate
• Power-saving sleep mode

How to use

Install the AOM-TPM-9665H(-S/-C) module according to the server or motherboard manufacturer's installation instructions, enable TPM in the system firmware (BIOS/UEFI) and complete any required provisioning steps such as generating or importing an Endorsement Key (EK) and setting up platform policies. Use the operating system or management tools to manage keys, certificates and TPM-enabled features for secure boot, measured boot, remote attestation and encryption services.

Recommendations

Keep firmware and platform firmware interfaces up to date, protect physical access to systems with TPM installed, and follow vendor guidelines for provisioning and key backup to ensure the confidentiality and integrity of cryptographic keys and certificates.