Specifications: IC: INFINEON SLB9665
Type:
TCG Compliance:
TCG PC Client Platform TPM Profile (PTP) Specification; Family 2.0 (Trusted Platform Module Library; Family 2.0)
TCG PC Client Specific TPM Interface Specification (TIS), Version 1.3 (TPM Main Specification; Family 1.2 Revision 116)
Low standby power consumption
Defends Against:
Fault injection attacks
Physical attacks
Side channel attacks
Differential fault analysis attacks
RNG attacks
Sensor and test mode attacks
Dictionary attacks
Support OS:
Support Windows 8.1, Windows 10 Bitlocker.
Supported on X299, AM4 and newer platform motherboards.
Security: UEFI Secure Boot and Secure Start support
Immutable Silicon Root of Trust
FIPS 140-3 validation (iLO 6 certification in progress)
Common Criteria certification (iLO 6 certification in progress)
Configurable for PCI DSS compliance
Advanced Encryption Standard (AES) and Triple Data Encryption Standard (3DES) on browser
Support for Commercial National Security Algorithms (CNSA)
Tamper-free updates -- components digitally signed and verified
Secure Recovery -- recover critical firmware to known good state on detection of compromised firmware
Ability to rollback firmware
Secure erase of NAND
TPM (Trusted Platform Module) 2.0
Front bezel key-lock feature -- standard, available in both Tower and Rack models
Padlock slot, standard
Kensington Lock slot, standard
Chassis Intrusion detection option
Security: UEFI Secure Boot and Secure Start support
Immutable Silicon Root of Trust
FIPS 140-3 validation (iLO 6 certification in progress)
Common Criteria certification (iLO 6 certification in progress)
Configurable for PCI DSS compliance
Advanced Encryption Standard (AES) and Triple Data Encryption Standard (3DES) on browser
Support for Commercial National Security Algorithms (CNSA)
iLO Security Modes
Granular control over iLO interfaces
Smart card (PIV/CAC) and Kerberos based 2-factor Authentication
Tamper-free updates - components digitally signed and verified
Secure Recovery - recover critical firmware to known good state on detection of compromised firmware
Ability to rollback firmware
Secure erase of NAND/User Data
TPM 2.0 (Trusted Platform Module 2.0)
Security: UEFI Secure Boot and Secure Start support
Tamper-free updates - components digitally signed and verified
Immutable Silicon Root of Trust
Ability to rollback firmware
FIPS 140-2 validation
Secure erase of NAND/User data
Common Criteria certification
Configurable for PCI DSS compliance
Embedded TPM (Trusted Platform Module) 2.0. Excluded for shipments to China.
Advanced Encryption Standard (AES) and Triple Data Encryption Standard (3DES) on browser
Bezel Locking Kit option
Support for Commercial National Security Algorithms (CNSA)
Chassis Intrusion detection option
Secure Recovery - recover critical firmware to a known good state on detection of compromised firmware
Security: UEFI Secure Boot and Secure Start support Immutable Silicon Root of Trust FIPS 140-2 validation (iLO 5 certification in progress) Common Criteria certification (iLO 5 certification in progress) Configurable for PCI DSS compliance Advanced Encryption Standard (AES) and Triple Data Encryption Standard (3DES) on browser Support for Commercial National Security Algorithms (CNSA) Tamper-free updates - components digitally signed and verified Secure Recovery - recover critical firmware to known good state on detection of compromised firmware Ability to rollback firmware Secure erase of NAND/User data TPM (Trusted Platform Module) 1.2 option TPM (Trusted Platform Module) 2.0 option Front bezel key-lock feature - standard, available in both Tower and Rack models Padlock slot, standard Kensington Lock slot, standard
Security: UEFI Secure Boot and Secure Start support
Immutable Silicon Root of Trust
FIPS 140-3 validation (iLO 6 certification in progress)
Common Criteria certification (iLO 6 certification in progress)
Configurable for PCI DSS compliance
Advanced Encryption Standard (AES) and Triple Data Encryption Standard (3DES) on browser
Support for Commercial National Security Algorithms (CNSA)
Tamper-free updates -- components digitally signed and verified
Secure Recovery -- recover critical firmware to known good state on detection of compromised firmware
Ability to rollback firmware
Secure erase of NAND
TPM (Trusted Platform Module) 2.0
Front bezel key-lock feature -- standard, available in both Tower and Rack models
Padlock slot, standard
Kensington Lock slot, standard
Security: UEFI Secure Boot and Secure Start support
Immutable Silicon Root of Trust
FIPS 140-3 validation (iLO 6 certification in progress)
Common Criteria certification (iLO 6 certification in progress)
Configurable for PCI DSS compliance
Advanced Encryption Standard (AES) and Triple Data Encryption Standard (3DES) on browser
Support for Commercial National Security Algorithms (CNSA)
iLO Security Modes
Granular control over iLO interfaces
Smart card (PIV/CAC) and Kerberos based 2-factor Authentication
Tamper-free updates - components digitally signed and verified
Secure Recovery - recover critical firmware to known good state on detection of compromised firmware
Ability to rollback firmware
Secure erase of NAND/User Data
TPM 2.0 (Trusted Platform Module 2.0)
Security: UEFI Secure Boot and Secure Start support
Tamper-free updates - components digitally signed and verified
Immutable Silicon Root of Trust
Ability to rollback firmware
FIPS 140-2 validation
Secure erase of NAND/User data
Common Criteria certification
Configurable for PCI DSS compliance
Embedded TPM (Trusted Platform Module) 2.0. Excluded for shipments to China.
Advanced Encryption Standard (AES) and Triple Data Encryption Standard (3DES) on browser
Support for Commercial National Security Algorithms (CNSA)
Secure Recovery - recover critical firmware to a known good state on detection of compromised firmware