TPM Module Supermicro AOM-TPM-9655V TCG 1.2

The Supermicro AOM-TPM-9655V is a TCG 1.2 compliant Trusted Platform Module (TPM) that provides hardware-based protection for encryption keys, passwords and digital certificates on Supermicro motherboards. Designed for server environments, the module performs cryptographic operations on-chip and offers features such as Intel TXT and AMD SVM support, power-saving sleep mode and full personalization with an Endorsement Key and certificate.

Advantages

The AOM-TPM-9655V isolates sensitive credentials in hardware to reduce exposure to external software attacks and physical theft. Its Advanced Crypto Engine supports RSA keys up to 2048 bits and includes anti-dictionary-attack protection, a tick counter with tamper detection, and multiple hardware sensors for voltage and frequency anomalies. The module uses a 3.3 V supply and includes WHQL dual-mode Windows kernel drivers for TPM 1.1b and 1.2.

Suitable for

• Enterprise and datacenter Supermicro servers requiring hardware-rooted security
• Platforms needing secure boot, disk encryption and platform integrity verification
• Systems that integrate with Microsoft and common PKI and VPN applications

Key specifications

• TCG 1.2 compliant Trusted Platform Module (TPM)
• Advanced Crypto Engine (ACE) with RSA support up to 2048-bit keys
• Power supply: 3.3 V
• Tick counter with tamper detection; protection against dictionary attacks
• Security sensors: over/under voltage detection, low frequency sensor, high frequency filter, reset filter
• Memory Encryption/Decryption (MED)
• WHQL dual-mode Windows Kernel Mode Driver (TPM 1.1b + 1.2)
• Full personalization with Endorsement Key (EK) and EK certificate

How to use

Install the AOM-TPM-9655V into the 20-pin TPM connector on a compatible Supermicro motherboard following the server vendor’s installation instructions. After physical installation, enable TPM support in the system BIOS/UEFI and complete any required platform personalization (for example, provisioning the Endorsement Key and EK certificate). Use the operating system or management software to enroll and manage keys, enable secure boot or configure disk encryption according to your security policy.

Recommendations

Use the module with supported Supermicro motherboards and keep motherboard BIOS/UEFI and system drivers up to date. Protect EK and provisioning procedures by restricting administrative access during personalization and follow organizational policies for key management and backup.