Asus TPM-SPI Quick Start Manual

E15028 / First Edition / November 2018

TPM-SPI (14-1 pin)

Quick Start Guide

Using the TPM-SPI card

The TPM-SPI card securely store keys, digital certicates, passwords, and data. It helps enhance the
network security, protects digital identities, and ensures platform integrity.

The TPM-SPI card supports 64-bit Windows® 10 UEFI OS only.

To use the TPM-SPI card:

1. Insert the TPM-SPI card to the SPI_TPM connector on your motherboard.

Pin denition:

NC

MISO_TPMNCNCNCRST#_TPM

MOSI_TPM

NOTE: The TPM module and BIOS share the same pin layout. The NC signal is used for the TPM­SPI, while the BIOS signal is used for the motherboard.

VCC

NC

GND

CS#_TPM

PIRQ#_TPM

SCLK#_TPM

PIN 1

2. Press <Delete> or <F2> to enter the BIOS Setup program at the system startup.

3. From the Advanced menu, click Trusted Computing.

Aptio Setup Utility - Copyright (C) 2018 American Megatrends, Inc.

Main Ai Tweaker Advanced Monitor Boot Tool Exit

Platform Misc Conguration
System Agent (SA) Conguration
PCH Conguration
PCH Storage Conguration
PCH-FW Conguration

Trusted Computing

Onboard Devices Conguration
APM Conguration
USB Conguration
Network Stack Conguration

HDD/SSD SMART Information

HDD Secure Erase
Event Log

Trusted Computing Settings

: Select Screen

: Select Item
Enter: Select
+/-: Change Opt.
F1: General Help
F2: Previous Values
F5: Optimized Defaults
F10: Save & Exit
ESC: Exit

Version 2.17.1246 Copyright (C) 2018 American Megatrends, Inc.

4. Set the Security Device Support and TPM State items to [Enabled].

Aptio Setup Utility - Copyright (C) 2018 American Megatrends, Inc.

Main Ai Tweaker Advanced Monitor Boot Tool Exit

TPM20 Device Found

Security Device Support [Enable]

Active PCR banks SHA-1,SHA256
Available PCR banks SHA-1,SHA256

SHA-1 PCR Bank [Enabled]
SHA256 PCR Bank [Enabled]

Pending operation [None]
Platform Hierarchy [Enabled]
Storage Hierarchy [Enabled]
Endorsement Hierarchy [Enabled]
TPM2.0 UEFI Spec Version [TCG_2]
Physical Presence Spec Version [1.3]

Enables or Disables BIOS
support for security
device. O.S. will not
show Security Device. TCG
EFI protocol and INT1A
interface will not be
available.

: Select Screen

: Select Item
Enter: Select
+/-: Change Opt.
F1: General Help
F2: Previous Values
F5: Optimized Defaults
F10: Save & Exit
ESC: Exit

Version 2.17.1246 Copyright (C) 2018 American Megatrends, Inc.

5. Press <F10> to save the changes, exit the BIOS Setup program and boot into the OS.

Now you can start using the TPM-SPI card with Windows® BitLocker.