TPM security module Supermicro AOM-TPM-9670H — hardware Trusted Platform Module for server security

Supermicro AOM-TPM-9670H is a hardware Trusted Platform Module (TPM) designed to add platform-level cryptographic services to compatible Supermicro servers and workstations. It provides a dedicated, tamper-resistant environment for storing cryptographic keys and performing secure cryptographic operations, supporting hardware-based authentication, measured boot, and integrity checks for firmware and the boot chain. The module integrates with system firmware and operating systems that support TPM standards to enhance overall platform trust and key management.

Advantages

The AOM-TPM-9670H offers isolated key storage and cryptographic processing to reduce the exposure of sensitive keys to software attacks. It supports standard TPM functionality for secure generation, storage, and use of asymmetric and symmetric keys, as well as platform attestation and sealed storage. By providing hardware-backed root of trust and integrity reporting, the module assists in enforcing secure boot policies and detecting unauthorized changes to firmware and configuration.

Suitable for

• Servers and rack-mounted systems requiring hardware-based platform trust.
• Workstations that need secure key storage and authentication for disk encryption and credential protection.
• Environments implementing measured boot, remote attestation, or hardware-backed identity.
• Enterprise deployments where firmware integrity and boot chain protection are required.

Key specifications

• Form factor: add-on module compatible with supported Supermicro systems.
• Function: Trusted Platform Module providing cryptographic services and secure key storage.
• Security features: hardware-based key generation, secure storage, attestation, and sealed storage for platform integrity.
• Integration: designed to integrate with system firmware and operating systems that support TPM standards.

How to use

Install the AOM-TPM-9670H into the designated TPM header or module connector on a compatible Supermicro motherboard following the system manufacturer’s installation instructions. After physical installation, enable TPM support in the system firmware/BIOS and install any required drivers or firmware updates provided by the system vendor. Configure TPM-enabled features in the operating system or management tools, such as disk encryption, measured boot, or remote attestation. Use the system’s security management utilities to create, store, and manage keys and to set policies for sealed storage and attestation.

Usage recommendations

Ensure firmware and system drivers are updated before enabling TPM features. Back up platform and recovery keys according to your organization’s security policy and restrict physical access to the server chassis. Verify operating system and management software compatibility with TPM standards to achieve intended security functions.