TPM 2.0 Module HP PCA TPM MOD 2.0 — Trusted Platform Module for ProLiant and Apollo Gen9 servers

HP TPM 2.0 module (PCA TPM MOD 2.0) is a hardware-based Trusted Platform Module designed for supported HPE Gen9 servers. The module plugs into a dedicated socket on the system I/O board and provides secure key storage and cryptographic functions to support platform integrity checks, secure boot processes, disk encryption, and authentication workflows in data center environments. The module is intended for use with ProLiant and Apollo Gen9 platforms and integrates with server firmware to enable operating system and application-level security features.

Advantages

The TPM module offers hardware-backed cryptographic operations and isolated key storage that reduce the risk of key extraction and tampering compared with software-only solutions. By enabling secure boot and measured boot capabilities, it helps ensure platform integrity from power-up through OS loading. The module supports common use cases such as disk encryption and authentication services, providing a standardized interface for security software and management tools in enterprise environments.

Suitable for

• Enterprise servers requiring hardware-based root of trust
• Secure boot and measured boot implementations
• Full-disk encryption and key protection
• Authentication and certificate storage for server services

Key specifications

• Form factor: add-in module that plugs into a socket on the system I/O board
• Function: Trusted Platform Module (TPM) providing cryptographic primitives and secure key storage
• Compatibility: designed for use with HPE ProLiant and Apollo Gen9 server families
• Security features: hardware-isolated key storage, support for platform integrity measurement and secure boot workflows
• Integration: interacts with server firmware and operating system security stacks

How to use

Install the module by inserting it into the dedicated socket on the server system I/O board following the server manufacturer service documentation. After physical installation, enable and configure TPM support in the server firmware (BIOS/UEFI) and initialize the module using the operating system or management software. Use vendor-recommended tools to provision keys, enable secure boot or disk encryption, and integrate the module with enterprise authentication services. Note that the module is attached to the system board with a security rivet and is not intended for routine customer replacement; any service or replacement should follow HPE service procedures.

Usage recommendations

Follow HPE service and security guidance when installing and provisioning the TPM module. Maintain firmware and management software updates to ensure compatibility and security. For modules attached with security rivets, contact authorized service personnel for removal or replacement to avoid damage to the system board.