Enable TPM

The CX51x0 is extended with a TPM (Trusted Platform Module) for basic safety functions. Among other features, this enables encryption of the user data and thus prevents unauthorized read access when the device is switched off. Unauthorized manipulation of the software is also prevented. On the CX51x0 the firmware TPM solution (fTPM) is implemented, where the main CPU has a microcode to represent the function of a TPM (see: Technical data).

The TPM is disabled by default and has to be enabled in the BIOS before it can be used. Further information about the use of a TPM on a Beckhoff Industrial PC can be found at: TPM on Beckhoff IPC

Requirements:

Proceed as follows:

1. Restart your Industrial PC and press [Del] to start the BIOS setup.
The BIOS setup window appears.
2. Under Boot > Boot mode select, select the option UEFI.
3. Under Advanced > Trusted Computing set the option Security Device Support to Enable.
Enable TPM 1:
4. Press [F4] to save the settings and exit the BIOS setup.
The device is restarted.
If you have previously stored keys in the TPM, we recommend resetting the TPM to factory defaults, which will delete any existing keys. The required options are available in the BIOS once the TPM has been enabled and the PC has been rebooted.