Removing and replacing the Trusted Platform Module

Use this procedure to remove and replace a faulty Trusted Platform Module (TPM) with a new one received from stock.

About this task

No tools are required to complete this task.

Do not remove or loosen any screws.

Electrostatic discharge precaution symbol When you replace this part, you must follow recommended procedures for handling electrostatic discharge (ESD)-sensitive devices.

Important: If the node canister is part of a system and is the last online node, do not proceed to change the TPM in the node. Doing so prevents the node from accessing encryption keys that are stored on the node canister boot drive. Instead, complete repairs to bring another node (ideally the partner node) online in the system. The node with the replacement TPM can then obtain required encryption keys from the online node.

Procedure

  1. Identify the node canister that contains the faulty TPM. Use the management GUI to identify any dependencies on the node canister. Understand the impact of any dependencies and resolve them, if necessary.

    The Event Log contains the TPM failure error. You can also locate the enclosure MTM and serial number, and the node canister serial number.

  2. Label each power and cable connection or record all cables that are connected to the node canister. This information is used to reconnect the canister later.
  3. Remove the cables from the node canister.
  4. Follow Removing and reseating a node canister to disconnect and remove the node canister with the faulty TPM.
  5. Remove the cover of the node canister, as described in Removing and replacing the cover of a node canister (IBM SSR task).

Removing the TPM

  1. Locate the TPM, which is between the boot drive and CMOS battery, as shown in Figure 1.
    Figure 1. Locating the TPM
    Locating the TPM
  2. Insert your finger tip between the latches and hold the TPM between your thumb and finger, as shown in Figure 2.
    Figure 2. Removing the TPM
    Removing the TPM
  3. Remove the TPM by pulling it upwards from its socket.

Replacing the TPM and boot drives

  1. Touch the replacement TPM packaging onto a metal area of the case; then, remove the replacement TPM from its package.
  2. Align the replacement TPM over the socket and firmly press it straight down into the socket.
  3. Install the node canister lid, as described in Removing and replacing the cover of a node canister (IBM SSR task).
  4. Reinstall the node canister, as described in Removing and reseating a node canister.
  5. Reconnect the power and networking cables to the node canister, ensuring the cables go into the same ports from which they were removed in step 4.
  6. When the node canister is back online, check the Event Log for new events, particularly events that relate to TPM and encryption failures.