Asus Tpm-spi Motherboards User Guide

TPM-SPI Motherboards

Product Information

The TPM-SPI card (E20464) is a security device that provides
Trusted Platform Module (TPM) functionality. It is designed to
enhance the security of the system by providing secure storage and
cryptographic functions. The card is compatible with the TPM module
and BIOS, sharing the same pin layout. The TPM-SPI card supports
features such as secure boot, secure storage, and hardware-based
encryption.

Product Usage Instructions

1. Press <F2> or <F10> during
   system startup to enter the BIOS Setup program.
2. In the BIOS Setup program, navigate to the Advanced menu.
3. Select “Trusted Computing” from the menu.
4. In the Trusted Computing settings, set the “Security Device
   Support” and “TPM State” items to [Enabled].
5. Save the changes and exit the BIOS Setup program.

To clear the TPM security hardware:

1. Launch the Trusted Computing BIOS screen by following steps 1-3
   in the product usage instructions above.
2. In the BIOS screen, set the “Pending operation” item to [TPM
   Clear].
3. Save the changes and exit the BIOS Setup program.

Note: For more detailed instructions and information, please
refer to the user manual provided with the product.

E20464 / Revised Edition V2 / June 2022
TPM-SPI (14-1 pin)
Quick Start Guide
Using the TPM-SPI card
The TPM-SPI card securely stores keys, digital certificates, passwords, and data. It helps enhance the network security, protects digital identities, and ensures platform integrity. The TPM-SPI card supports 64-bit Windows® 10 UEFI OS only. To use the TPM-SPI card: 1. Insert the TPM-SPI card to the SPI_TPM connector on your motherboard.
Pin definition:
PIN 1
NOTE: The TPM module and BIOS share the same pin layout. The NC signal is used for the TPMSPI, while the BIOS signal is used for the motherboard.

NC MISO_TPM NC NC NC RST#_TPM VCC

MOSI_TPM SCLK#_TPM
GND NC
CS#_TPM PIRQ#_TPM

2. Press <Delete> or <F2> to enter the BIOS Setup program at the system startup. 3. From the Advanced menu, click Trusted Computing.

Aptio Setup Utility – Copyright (C) 2018 American Megatrends, Inc. Main Ai Tweaker Advanced Monitor Boot Tool Exit

Platform Misc Configuration System Agent (SA) Configuration PCH Configuration PCH Storage Configuration PCH-FW Configuration Trusted Computing Onboard Devices Configuration APM Configuration USB Configuration Network Stack Configuration HDD/SSD SMART Information
HDD Secure Erase Event Log

Trusted Computing Settings
: Select Screen : Select Item Enter: Select +/-: Change Opt. F1: General Help F2: Previous Values F5: Optimized Defaults F10: Save & Exit ESC: Exit

Version 2.17.1246 Copyright (C) 2018 American Megatrends, Inc.

4. Set the Security Device Support and TPM State items to [Enabled].

Aptio Setup Utility – Copyright (C) 2018 American Megatrends, Inc. Main Ai Tweaker Advanced Monitor Boot Tool Exit

TPM20 Device Found
Security Device Support Active PCR banks Available PCR banks
SHA-1 PCR Bank SHA256 PCR Bank

[Enable] SHA-1,SHA256 SHA-1,SHA256
[Enabled] [Enabled]

Enables or Disables BIOS support for security device. O.S. will not show Security Device. TCG EFI protocol and INT1A interface will not be available.

Pending operation Platform Hierarchy Storage Hierarchy Endorsement Hierarchy TPM2.0 UEFI Spec Version Physical Presence Spec Version

[None] [Enabled] [Enabled] [Enabled] [TCG_2] [1.3]

: Select Screen : Select Item Enter: Select +/-: Change Opt. F1: General Help F2: Previous Values F5: Optimized Defaults F10: Save & Exit ESC: Exit

Version 2.17.1246 Copyright (C) 2018 American Megatrends, Inc.
5. Press <F10> to save the changes, exit the BIOS Setup program and boot into the OS. Now you can start using the TPM-SPI card with Windows® BitLocker.

Clearing the TPM security hardware
You can clear the TPM security hardware either from the BIOS or the OS.
Clearing from the BIOS
To clear from the BIOS: 1. Launch the Trusted Computing BIOS screen.
NOTE: For details, refer to steps 2-3 of the section Using the TPM-SPI card.

2. Set the Pending operation item to [TPM Clear].

Aptio Setup Utility – Copyright (C) 2018 American Megatrends, Inc. Advanced

TPM20 Device Found

Security Device Support Active PCR banks Available PCR banks

[Enable] SHA-1,SHA256 SHA-1,SHA256

SHA-1 PCR Bank SHA256 PCR Bank

[Enabled] [Enabled]

Pending operation

[None]

Platform Hierarchy Storage Hierarchy Endorsement Hierarchy

Pen[diEnngabopleerda]tion None [Enabled] TPM Clea[rEnabled]

TPM2.0 UEFI Spec Version

[TCG_2]

Physical Presence Spec Version

[1.3]

Enables or Disables BIOS support for security device. O.S. will not show Security Device. TCG EFI protocol and INT1A interface will not be available.
: Select Screen : Select Item Enter: Select +/-: Change Opt. F1: General Help F2: Previous Values F5: Optimized Defaults F10: Save & Exit ESC: Exit

Version 2.17.1246 Copyright (C) 2018 American Megatrends, Inc.
3. Press <F10> to save the changes and exit the BIOS Setup program.

Clearing from the OS
To clear from the OS: 1. In the Windows® Search box, key in tpm.msc and press <Enter>. The TPM Management screen
appears.
2. Under Actions, click Clear TPM… 3. Click Restart to restart your computer.