ASRock TPM2-S TPM Module User Manual

1. Introduction

The ASRock TPM2-S is a Trusted Platform Module (TPM) designed to enhance the security of your computer system. It integrates a Nuvoton NPCT650 chip and complies with TCG PC Client Platform TPM Profile (PTP) Specification Family 2.0 and TCG PC Client Specific TPM Interface Specification (TIS), Version 1.3.

A TPM is a secure cryptoprocessor that stores cryptographic keys used for platform authentication. It is crucial for features like Microsoft BitLocker Drive Encryption and is a requirement for installing certain operating systems, such as Windows 11, on compatible hardware.

This module provides hardware-level protection against various attacks, including fault injection, physical attacks, side channel attacks, differential fault analysis, RNG attacks, sensor and test mode attacks, and dictionary attacks.

2. Setup and Installation

Before installation, ensure your motherboard has a compatible TPM header. Refer to your motherboard's manual for the exact location and pin configuration of the TPM header. The ASRock TPM2-S module is designed for easy integration into compatible ASRock motherboards.

2.1 Physical Installation

1. Power Off: Completely shut down your computer and disconnect it from the power source.
2. Open Case: Open your computer case to access the motherboard.
3. Locate TPM Header: Identify the TPM header on your motherboard. It is typically a multi-pin header, often labeled "TPM" or similar.
4. Align and Insert: Carefully align the ASRock TPM2-S module with the TPM header, ensuring the correct orientation. Gently press down until the module is securely seated. Do not force the module into place.

An image showing the ASRock TPM2-S TPM Module, a small circuit board with a black connector and gold pins on one side, ready for installation into a motherboard header.

After physical installation, close your computer case and reconnect the power.

2.2 BIOS Configuration

After installing the TPM module, you may need to enable it in your motherboard's BIOS/UEFI settings.

1. Enter BIOS: Power on your computer and repeatedly press the designated key (e.g., Del, F2, F10) to enter the BIOS/UEFI setup utility.
2. Navigate to Security Settings: Look for a section related to "Security," "Advanced," or "Trusted Computing."
3. Enable TPM: Find the option for "Trusted Platform Module," "TPM Device," or "Intel Platform Trust Technology (PTT)" and ensure it is set to Enabled. If you have an integrated PTT option, you may need to disable it to use the discrete TPM module.
4. Save and Exit: Save your changes and exit the BIOS. Your system will restart.

Note: Motherboard BIOS interfaces vary. Consult your specific motherboard's manual for detailed instructions on accessing and configuring TPM settings. Some older motherboards may require a BIOS update to support TPM 2.0.

3. Operating the TPM Module

Once installed and enabled, the TPM module operates in the background, providing hardware-level security for your system. It is primarily used by the operating system and specific applications for cryptographic functions.

3.1 Windows Integration

The ASRock TPM2-S module is compatible with Windows 8.1, Windows 10, and Windows 11. It enables critical security features such as:

• BitLocker Drive Encryption: Protects data by encrypting entire volumes.
• Windows Hello: Enhances biometric authentication for login.
• Device Encryption: Automatic encryption on supported devices.
• Secure Boot: Helps prevent malicious software from loading during startup.

3.2 Verifying TPM Status in Windows

To verify that your TPM module is recognized and functioning correctly in Windows:

1. Press Windows Key + R to open the Run dialog.
2. Type tpm.msc and press Enter.
3. The "TPM Management on Local Computer" console will open. Here, you can see the TPM status, manufacturer information (Nuvoton), and version (2.0).

4. Maintenance

The ASRock TPM2-S module is a hardware component that generally requires minimal maintenance. It does not have user-serviceable parts.

• Firmware Updates: In rare cases, ASRock may release firmware updates for the TPM module. These updates would typically be integrated into motherboard BIOS updates. Always check the official ASRock website for your specific motherboard model for any recommended BIOS or firmware updates.
• Physical Care: Keep the interior of your computer case clean and free of dust to ensure proper airflow and prevent overheating of components, including the TPM module.

5. Troubleshooting

If you encounter issues with your ASRock TPM2-S module, consider the following troubleshooting steps:

• TPM Not Detected:
  • Ensure the module is securely seated in the TPM header on the motherboard.
  • Verify that the TPM option is enabled in your motherboard's BIOS/UEFI settings. Look for "Trusted Platform Module" or "TPM Device."
  • If your motherboard has an integrated Intel Platform Trust Technology (PTT) or AMD fTPM, ensure it is disabled in the BIOS to allow the discrete TPM module to be recognized.
  • Check your motherboard's manual or ASRock's website for compatibility. Not all motherboards support discrete TPM modules, or they may require a specific BIOS version.
• Windows 11 Upgrade Issues:
  • Even with a TPM 2.0 module, Windows 11 has other system requirements (e.g., CPU generation, Secure Boot). Ensure all other requirements are met.
  • Confirm that Secure Boot is enabled in your BIOS/UEFI settings.
  • Run the PC Health Check app from Microsoft to identify any remaining compatibility issues.
• BIOS Settings Reset: If you reset your BIOS settings to default, the TPM module might become disabled. Re-enable it in the BIOS.
• Driver Issues: Typically, the TPM module uses generic drivers provided by the operating system. If issues persist, ensure your operating system is up to date.

If these steps do not resolve the issue, contact ASRock technical support or consult their official support resources for further assistance.

6. Specifications

7. Warranty and Support

For detailed warranty information regarding your ASRock TPM2-S module, please refer to the warranty card included with your product or visit the official ASRock website. Warranty terms and conditions may vary by region and retailer.

For technical support, driver downloads, and frequently asked questions, please visit the official ASRock support website. You can typically find support resources by searching for your specific motherboard model and the TPM2-S module.

ASRock Official Website: www.asrock.com