Allow platform enrollment
Enabled/Allow Management Provider and Wizard: Platforms can be initialized via Management Provider interface, Quick Initialization Wizard or Initialization Wizard.
Enabled/Allow Management Provider only:
Platforms can be initialized only via Management Provider interface.
Disabled: Platforms cannot be initialized.
Default value: Enabled/Allow Management Provider and Wizard.
Supported on:
| Registry Hive | HKEY_LOCAL_MACHINE |
| Registry Path | Software\Policies\Infineon\TPM Software |
| Value Name | PlatformEnrollmentPol |
| Value Type | REG_DWORD |
| Enabled Value | 1 |
| Disabled Value | 0 |
Select an option to enable:
- Allow Management Provider only
Registry Hive HKEY_LOCAL_MACHINE Registry Path Software\Policies\Infineon\TPM Software Value Name PlatformEnrollment Value Type REG_DWORD Value 1 - Allow Management Provider and Wizard
Registry Hive HKEY_LOCAL_MACHINE Registry Path Software\Policies\Infineon\TPM Software Value Name PlatformEnrollment Value Type REG_DWORD Value 2
ifxsppol.admx
- Security Platform
- All Versions Settings
- Allow administrators to retrieve the SRK public key remotely
- Allow administrators to take ownership remotely
- Allow administrators to use platform keys remotely
- Allow reading of unprotected TPM NV memory
- Configure dictionary attack threshold
- Enable stringent password field security
- Enhanced Authentication providers
- Prepare TPM enrollment
- Purge keys when entering energy-saving states
- Previous Product Versions Settings
- Stand-alone Computer Version Settings
- Owner Password
- Allow platform enrollment
- Backup archive location
- Enforce configuration of Backup including Emergency Recovery
- Enforce configuration of Password Reset
- Enforce immediate System Backup
- Use public key of Emergency Recovery Token from archive
- Use public key of Password Reset Token from archive
- All Versions Settings
- Security Platform
- All Versions Settings
- Basic User Passphrase
- Basic User Password
- Allow EFS configuration
- Allow key import for User
- Allow PSD configuration
- Allow secure e-mail configuration
- Allow user to temporarily disable the Security Platform Features
- Control Quick Initialization
- Creation of non-migratable Basic User Key
- EFS certificate expiration warning occurrence
- EFS certificate type and enrollment
- EFS self-signed certificates validity period
- Enable caching of Basic User Password
- Enforce enabling of Password Reset
- Enforce Enhanced Authentication
- Enforce strong private key protection for MS-CAPI signing keys
- File location for Personal Secure Drive
- Minimum free space after PSD creation
- URL to start from wizard for certificate enrollment
- Stand-alone Computer Version Settings
- All Versions Settings