Asus TPM-SPI User manual

TPM-SPI (14-1 pin)
Quick Start Guide
E15028 / First Edition / November 2018
Using the TPM-SPI card
The TPM-SPI card securely store keys, digital certicates, passwords, and data. It helps enhance the
network security, protects digital identities, and ensures platform integrity.
The TPM-SPI card supports 64-bit Windows® 10 UEFI OS only.
To use the TPM-SPI card:
1. Insert the TPM-SPI card to the SPI_TPM connector on your motherboard.
Pin denition:
PIN 1
NC MISO_TPM NC NC NC RST#_TPM VCC
MOSI_TPM
SCLK#_TPM
GND
NC
PIRQ#_TPM
CS#_TPM
NOTE: The TPM module and BIOS share the same pin layout. The NC signal is used for the TPM-
SPI, while the BIOS signal is used for the motherboard.

4. Set the Security Device Support and TPM State items to [Enabled].
5. Press <F10> to save the changes, exit the BIOS Setup program and boot into the OS.
Now you can start using the TPM-SPI card with Windows® BitLocker.
: Select Screen
: Select Item
Enter: Select
+/-: Change Opt.
F1: General Help
F2: Previous Values
F5: Optimized Defaults
F10: Save & Exit
ESC: Exit
Version 2.17.1246 Copyright (C) 2018 American Megatrends, Inc.
Aptio Setup Utility - Copyright (C) 2018 American Megatrends, Inc.
Main Ai Tweaker Advanced Monitor Boot Tool Exit
Enables or Disables BIOS
support for security
device. O.S. will not
show Security Device. TCG
EFI protocol and INT1A
interface will not be
available.
TPM20 Device Found
Security Device Support [Enable]
Active PCR banks SHA-1,SHA256
Available PCR banks SHA-1,SHA256
SHA-1 PCR Bank [Enabled]
SHA256 PCR Bank [Enabled]
Pending operation [None]
Platform Hierarchy [Enabled]
Storage Hierarchy [Enabled]
Endorsement Hierarchy [Enabled]
TPM2.0 UEFI Spec Version [TCG_2]
Physical Presence Spec Version [1.3]
2. Press <Delete> or <F2> to enter the BIOS Setup program at the system startup.
3. From the Advanced menu, click Trusted Computing.
: Select Screen
: Select Item
Enter: Select
+/-: Change Opt.
F1: General Help
F2: Previous Values
F5: Optimized Defaults
F10: Save & Exit
ESC: Exit
Version 2.17.1246 Copyright (C) 2018 American Megatrends, Inc.
Aptio Setup Utility - Copyright (C) 2018 American Megatrends, Inc.
Main Ai Tweaker Advanced Monitor Boot Tool Exit
Trusted Computing Settings
Platform Misc Conguration
System Agent (SA) Conguration
PCH Conguration
PCH Storage Conguration
PCH-FW Conguration
Trusted Computing
Onboard Devices Conguration
APM Conguration
USB Conguration
Network Stack Conguration
HDD/SSD SMART Information
HDD Secure Erase
Event Log

3. Press <F10> to save the changes and exit the BIOS Setup program.
Clearing the TPM security hardware
You can clear the TPM security hardware either from the BIOS or the OS.
Clearing from the BIOS
To clear from the BIOS:
1. Launch the Trusted Computing BIOS screen.
NOTE: For details, refer to steps 2-3 of the section Using the TPM-SPI card.
: Select Screen
: Select Item
Enter: Select
+/-: Change Opt.
F1: General Help
F2: Previous Values
F5: Optimized Defaults
F10: Save & Exit
ESC: Exit
Version 2.17.1246 Copyright (C) 2018 American Megatrends, Inc.
Aptio Setup Utility - Copyright (C) 2018 American Megatrends, Inc.
Advanced
Enables or Disables BIOS
support for security
device. O.S. will not
show Security Device. TCG
EFI protocol and INT1A
interface will not be
available.
TPM20 Device Found
Security Device Support [Enable]
Active PCR banks SHA-1,SHA256
Available PCR banks SHA-1,SHA256
SHA-1 PCR Bank [Enabled]
SHA256 PCR Bank [Enabled]
Pending operation [None]
Platform Hierarchy [Enabled]
Storage Hierarchy [Enabled]
Endorsement Hierarchy [Enabled]
TPM2.0 UEFI Spec Version [TCG_2]
Physical Presence Spec Version [1.3]
Pending operation
None
TPM Clear
2. Set the Pending operation item to [TPM Clear].

3. Click Restart to restart your computer.
Clearing from the OS
To clear from the OS:
1. In the Windows®Search box, key in tpm.msc and press <Enter>. The TPM Management screen
appears.
2. Under Actions, click Clear TPM...