In such a case, use the backup copies of the emergency recovery archive file, emergency recovery token file, password reset token file, and personal secret file to restore the TPM configuration. . Make sure to make a backup copy of the data stored on the hard disk before sending your computer for repair. The hard disk may be initialized and returned after the repair work and, in such a case, you will not be able to restore the data on the hard disk using the backup copies of the emergency recovery archive file, emergency recovery token file, password reset token file, and personal secret file. 140140nN Customizing Your VAIO Computer . Make sure you set up the automatic backup operations after completing the TPM initialization wizard. If the window containing the Run automatic backup now check box is displayed after the setup, select the check box and update the backup files. The restore process using the backup files may fail if you do not set up the automatic backup operations. . The maintenance and management of TPM-protected data must be carried out at your own risk. Sony assumes no liabilities for any defects arising out of your data maintenance and management. 141141nN Customizing Your VAIO Computer Important Notice . Do not encrypt files containing keys to be used for encryption and folders including such files. Encrypting the files in the folders containing basic user keys and others, using the Encrypting File System (EFS) will disable you to launch your TPM software and decrypt the encrypted data in the following cases: . The TPM software has been installed. . The platform has been initialized. . The EFS functionality has been enabled in user initialization process. With the default settings, the files in the folders below cannot be encrypted because they have system attributes. Do not change the system attributes of the files in the folders below. ! The following folders are invisible by default. . Folders containing basic user keys and others C:\\All Users\Infineon\TPM Software 2.0\BackupData C:\\All Users\Infineon\TPM Software 2.0\PlatformKeyData C:\\All Users\Infineon\TPM Software 2.0\RestoreData (C:\\All Users is a shortcut to C:\ProgramData.) C:\\\AppData\Roaming\Infineon\TPM Software 2.0\UserKeyData 142142nN Customizing Your VAIO Computer . Do not encrypt the following archive, backup, or token files. There will be no way to restore them if you carelessly encrypt them. Sony assumes no liabilities for any troubles and damages arising out of your careless encryption of the following files and folders including them. . Automatic backup file Default file name: SPSystemBackup.xml Default path: None (Clicking Browse displays the \Documents\Security Platform window.) . Storage folder for automatic backup data Default file name: SPSystemBackup The folder is created as the subfolder for the SPSystemBackup.xml file. . Token file for decryption Default file name: SPEmRecToken.xml Default path: Removable media (FD, USB memory, etc.) . Key and certificate backup file Default file name: SpBackupArchive.xml Default path: None (Clicking Browse displays the \Documents\Security Platform window.) . PSD backup file Default file name: SpPSDBackup.fsb Default path: None (Clicking Browse displays the \Documents\Security Platform window.) 143143nN Customizing Your VAIO Computer . Do not encrypt the following password reset token or secret files. There will be no way to reset the password if you carelessly encrypt them. Sony assumes no liabilities for any troubles and damages arising out of your careless encryption of the following files and folders including them. . Password reset token file Default file name: SPPwdResetToken.xml Default path: Removable media (FD, USB memory, etc.) . Password reset secret file Default file name: SPPwdResetSecret.xml Default path: Removable media (FD, USB memory, etc.) 144144nN Customizing Your VAIO Computer Configuring the TPM To use the embedded TPM, you need to: 1 Enable the TPM on the BIOS setup screen. 2 Install the Infineon TPM Professional Package. 3 Initialize and configure the TPM. Enabling the TPM on the BIOS setup screen To enable the TPM 1 Turn on your computer. 2 Press the F2 key when the VAIO logo appears. The BIOS setup screen appears. If not, restart the computer and press the F2 key several times when the VAIO logo appears. 3 Press the < or , key to select TPM State and then select Enabled for Change TPM State. 4 Press the < or , key to select Exit and then Exit Setup; and press the Enter key. 5 After your system restarts, click Execute in the Physical Presence Operations window. ! Before enabling the TPM, make sure to set the power-on password to protect against unauthorized modification of the TPM configuration. If the TPM is enabled, it will take longer before the VAIO logo appears due to security checks at computer startup. . You can also disable the TPM and clear the T...
