ALIENCULTIST.COM
HARDWARE ARCHIVES // TPM / SECURITY MODULE RECORD

[ INDIVIDUAL COMPONENT // TRUSTED COMPUTING ]

ASRock TPM-SPI

ASRock discrete TPM 2.0 module with a Serial Peripheral Interface (SPI) host connection. It is electrically distinct from ASRock’s LPC TPM2-S module, even though both expose TPM 2.0 functions.

Original local schematic of ASRock TPM-SPI and its TPM host connector; not to scale
ORIGINAL LOCAL SCHEMATIC // NOT TO SCALE OR A PRODUCT PHOTOGRAPH

IDENTIFICATION: Confirm the printed part number, revision and host-board model. The connector, TPM generation, protocol transport and firmware support below are separate compatibility constraints.

Specifications and compatibility limits

Catalog subcategorySecurity coprocessors
Exact model / part identifierTPM-SPI
TPM protocol / command interfaceTCG TPM 2.0 command interface carried over SPI; SPI transport does not make the module a general SPI storage device.
Physical connector / transportSPI module with the vendor-described compact keyed header (13 signal contacts; confirm the exact board header drawing and orientation before handling). An LPC TPM2-S socket is incompatible.
Host compatibility limitASRock motherboards explicitly supporting TPM-SPI and the matching SPI header/firmware. The manufacturer’s board specification should confirm the module for that exact board; do not assume every X570-or-newer system or generic SPI header is supported.
Firmware / OS compatibility limitTPM 2.0 commands require a compatible SPI-connected host firmware implementation and an OS TCG TPM stack. Module firmware and BIOS support are board dependent; never use an LPC module firmware or pinout procedure here.

Installation, firmware and archival notes

  • Before installation, record the module label/revision, host motherboard or server model, board revision, BIOS/UEFI version and TPM mode. Check the host’s own support list and installation diagram.
  • Use ESD precautions and the documented module orientation. A physically fitting header may have different LPC/SPI signaling, pinout or voltage; never hot-plug a motherboard TPM module.
  • TPM clear, replacement, firmware changes or mode changes can invalidate keys sealed to the previous TPM state. Back up recovery keys and follow the platform owner’s documented recovery procedure before service.
  • This is a TPM, not a general-purpose cryptographic coprocessor or HSM: do not assume it offers PCIe/USB/network connectivity or vendor-specific bulk crypto APIs.

Where a manufacturer no longer publishes a current manual, preserve the source revision and verify the hardware against the original host platform before use.

Manufacturer and standard sources

  1. ASRock — TPM-SPI module specificationsManufacturer documentation for module identification and host/platform limitations.
  2. ASRock — TPM-SPI compatibility/support FAQSeparate manufacturer support reference for compatibility and host-specific limitations.
  3. TCG — TPM 2.0 Library SpecificationStandards reference for the TPM generation and command model; it does not certify this module’s electrical or platform compatibility.

Source scope is explicit: manufacturer documents identify the part and host constraints; TCG documentation defines protocol generation. Standards compliance does not guarantee a particular board/firmware combination.