Overview

The TPM is a hardware-based system security feature that can securely store information, such as passwords and encryption keys, which can be used to authenticate the platform. It can also be used to store platform measurements that help ensure that the platform remains trustworthy.

The optional TPM v1.2 module can be attached and secured to the system board with a rivet supplied with the module. To prevent possible damage to the TPM module or to the system board, the TPM cannot be removed from the board once it has been installed.

Question: Replace system board/TPM on a TPM server or Migrate encrypted data to a new system board and TPM.

Answer: The TPM is not moved but replaced. A new TPM will be provided and there is no transferring of key. After installing the new system board and TPM module or moving encrypted disks to new server (really same effect to the data) when the user attempts to the boot the OS they will be prompted for their recovery key. Once they provide the correct key they can then rebind the OS to the new system/TPM/configuration. In the case of Microsoft's Bit Locker there isn't a need to move keys. You would use the recovery key to gain access to the volume and then lock it back down to the new platform.