Removing and replacing the Trusted Platform Module

Use this procedure to remove and replace a faulty Trusted Platform Module (TPM) with a new one received from stock.

About this task

Do not remove or loosen any screws.

Electrostatic discharge precaution symbol When you replace this part, you must follow recommended procedures for handling electrostatic discharge (ESD)-sensitive devices.

Important: If the node canister is part of a system and is the last online node, do not proceed to change the TPM in the node. Doing so prevents the node from accessing encryption keys that are stored on the node canister boot drive. Instead, complete repairs to bring another node (ideally the partner node) online in the system. The node with the replacement TPM can then obtain required encryption keys from the online node.
Note: You will need two FRU kits. One FRU kit has the TPM with a matched boot drive, the other FRU kit is a blank boot drive. It does not matter which of the two boot drive slots the blank drive is put in.

Procedure

  1. Identify the node canister that contains the faulty TPM. Use the management GUI to identify any dependencies on the node canister. Understand the impact of any dependencies and resolve them, if necessary.

    The Event Log contains the TPM failure error. You can also locate the enclosure MTM and serial number, and the node canister serial number.

  2. Label each power and cable connection or record all cables that are connected to the node canister. This information is used to reconnect the canister later.
  3. Remove the cables from the node canister.
  4. Follow Removing and reseating a node canister to disconnect and remove the node canister with the faulty TPM.
  5. Remove the cover of the node canister, as described in Removing and replacing the cover of a node canister.

Removing the boot drives

  1. Locate the boot drives on the rear of the node canister.
    Figure 1. Location of boot drives
    Location of boot drives
  2. Hold the boot drive handle (3) and press down on the release latch (1) towards the handle and pull to remove the boot drive. In Figure 2, the faulty LED (2) location on the boot drive is shown.
    Figure 2. Removing the boot drive
    Removing boot drive
  3. When the latch is released, the boot drive can be slide out of slot.
    Figure 3. Released boot drive
    Released boot drive

Removing the TPM

  1. Locate the TPM, which is between the boot drive and CMOS battery, as shown in Figure 4.
    Figure 4. Locating the TPM
    Locating the TPM
  2. Insert your finger tip between the latches and hold the TPM between your thumb and finger, as shown in Figure 5.
    Figure 5. Removing the TPM
    Removing the TPM
  3. Remove the TPM by pulling it upwards from its socket.

Replacing the TPM and boot drives

  1. Touch the replacement TPM packaging onto a metal area of the case; then, remove the replacement TPM from its package.
  2. Align the replacement TPM over the socket and firmly press it straight down into the socket.
  3. Replace the paired boot drive that came with the TPM.
  4. Replace the blank boot drive.
  5. Install the node canister lid, as described in Removing and replacing the cover of a node canister.
  6. Reinstall the node canister, as described in Removing and reseating a node canister.
  7. Reconnect the power and networking cables to the node canister, ensuring the cables go into the same ports from which they were removed in step 4.
  8. When the node canister is back online, check the Event Log for new events, particularly events that relate to TPM and encryption failures.