Use public key of Emergency Recovery Token from archive
Enabled: Enter a path including public key file name, e.g. \\ServerName\FolderName\FileName.xml.
This path will be enforced when Emergency Recovery is configured.
If Emergency Recovery has already been configured on a Security Platform PC, this setting will not have any effect for this PC.
Be sure to enter a valid path which will be accessible to all Security Platform PC's. Otherwise the Emergency Recovery configuration will fail.
See also 'How to create a public key archive file from a token file' FAQ entry in the Security Platform Solution Help.
Disabled: The Emergency Recovery Token can be created or selected when Emergency Recovery is configured.
Default value: Disabled
Supported on:
Please enter a fully qualified file name.
Location:
| Registry Hive | HKEY_LOCAL_MACHINE |
| Registry Path | Software\Policies\Infineon\TPM Software |
| Value Name | EmergencyTokenPublicKeyLocation |
| Value Type | REG_SZ |
| Default Value |
ifxsppol.admx
- Security Platform
- All Versions Settings
- Allow administrators to retrieve the SRK public key remotely
- Allow administrators to take ownership remotely
- Allow administrators to use platform keys remotely
- Allow reading of unprotected TPM NV memory
- Configure dictionary attack threshold
- Enable stringent password field security
- Enhanced Authentication providers
- Prepare TPM enrollment
- Purge keys when entering energy-saving states
- Previous Product Versions Settings
- Stand-alone Computer Version Settings
- Owner Password
- Allow platform enrollment
- Backup archive location
- Enforce configuration of Backup including Emergency Recovery
- Enforce configuration of Password Reset
- Enforce immediate System Backup
- Use public key of Emergency Recovery Token from archive
- Use public key of Password Reset Token from archive
- All Versions Settings
- Security Platform
- All Versions Settings
- Basic User Passphrase
- Basic User Password
- Allow EFS configuration
- Allow key import for User
- Allow PSD configuration
- Allow secure e-mail configuration
- Allow user to temporarily disable the Security Platform Features
- Control Quick Initialization
- Creation of non-migratable Basic User Key
- EFS certificate expiration warning occurrence
- EFS certificate type and enrollment
- EFS self-signed certificates validity period
- Enable caching of Basic User Password
- Enforce enabling of Password Reset
- Enforce Enhanced Authentication
- Enforce strong private key protection for MS-CAPI signing keys
- File location for Personal Secure Drive
- Minimum free space after PSD creation
- URL to start from wizard for certificate enrollment
- Stand-alone Computer Version Settings
- All Versions Settings