--------------------------------------------------------------------------------
		Infineon TPM Professional Package V3.0
               		Release Notes
--------------------------------------------------------------------------------

Contents:

1. Welcome

2. Installation

3. Infineon Security Platform Software
  3.1 Security Platform Settings Tool
  3.2 Security Platform Initialization Wizard
  3.3 Security Platform User Initialization Wizard
  3.4 Security Platform Migration Wizard
  3.5 Security Platform Backup Wizard
  3.6 Security Platform Password Reset Wizard 	
  3.7 Security Platform PKCS #12 Import Wizard 	
  3.8 Security Platform Certificate Viewer and Certificate Selection 	
  3.9 Security Platform Taskbar Notification Icon
  3.10 Security Platform Integration Services
  3.11 Security Platform Services

4. If you have questions

5. Release Info
  5.1 Primary new Features
  5.2 About this Release
  5.3 Hardware and Software Platform Requirements
  5.4 Version Information
  5.5 Trusted Platform Module Firmware Upgrade
  5.6 Known Bugs and Limitations

================================================================================

1. Welcome

Welcome to the Infineon Security Platform Software 3.0.
The Infineon Security Platform Software is required to use your Trusted Platform Module.
The Infineon Security Platform Software is a TCG-compliant security solution for PCs.

For further information about TCG (Trusted Computing Group):
https://www.trustedcomputinggroup.org

2. Installation

The Infineon Security Platform Software installation - "Setup.exe" installs:

- Security Platform Help
- Security Platform Settings Tool
- Security Platform Initialization Wizard
- Security Platform User Initialization Wizard
- Security Platform Migration Wizard
- Security Platform Backup Wizard
- Security Platform Password Reset Wizard
- Security Platform PKCS #12 Import Wizard
- Security Platform Certificate Viewer and Certificate Selection
- Security Platform Taskbar Notification Icon
- Security Platform Integration Services
    * Microsoft® Outlook® Integration
    * Netscape® Integration
    * Encrypted File System Integration
    * Personal Secure Drive
    * Policy Administration
- Security Platform Services
    * TSS (TCG Software Stack) Service Provider
    * TSS Core Service
    * TSS Device Driver Library

Note:
To install this software, administrative rights are required.

Unattended Installation:
Silent installation can be done by calling the setup.exe with the following command line parameters:
- Installation for all users:      setup.exe /s /v"/qn"

Upgrade:
The upgrade from older product versions is described in ReadmeUpgrade.txt.


3. Infineon Security Platform Software

3.1 Security Platform Settings Tool

With the Security Platform Settings Tool, you can get various information about the Trusted Platform Module of your system. Also, you are able to carry out several administrative tasks. This component is designed as a Control Panel Applet. It provides a central access point for administrating the Infineon Security Platform.


3.2 Security Platform Initialization Wizard

The Infineon Security Platform Initialization Wizard is used to initialize the Security Platform and to configure Security Platform Features (backup including Emergency Recovery, Password Reset, Enhanced Authentication). These operations are needed to enable the Infineon Security Platform functionality and provide the basis for all further activities on the Infineon Security Platform.


3.3 Security Platform User Initialization Wizard

The Infineon Security Platform User Initialization Wizard is used to initialize the Security Platform Users and to configure the user-specific features (secure e-mail, file and folder encryption with EFS and PSD, Enhanced Authentication). This wizard has to be started for each computer user, who is intended to use the personalized Infineon Security Platform Features (i.e., who will be Infineon Security Platform User).


3.4 Security Platform Migration Wizard

The Infineon Security Platform Migration Wizard is used to transfer Infineon Security Platform user-specific keys and certificates from one Infineon Security Platform to another in a secure way.


3.5 Security Platform Backup Wizard

The Infineon Security Platform Backup Wizard is used to perform the backup or restore operations of Security Platform related data. These operations are needed to protect the data from accidental loss in case of an emergency.


3.6 Security Platform Password Reset Wizard 	

The Infineon Security Platform Password Reset Wizard is used to reset Basic User Passwords. Resetting a Basic User Password comprises administrative steps and user steps. The Password Reset Wizard contains both.


3.7 Security Platform PKCS #12 Import Wizard 	

The Infineon Security Platform PKCS #12 Import Wizard is used to import Personal Information Exchange files into the Security Platform.


3.8 Security Platform Certificate Viewer and Certificate Selection 	

Infineon Security Platform Certificate Viewer and Certificate Selection are used to manage certificates.


3.9 Security Platform Taskbar Notification Icon

The Taskbar Notification Icon is a status-sensitive entry point for Security Platform administrative tasks. Via this icon you can access the Taskbar Notification Menu. Furthermore, balloons and tool tips assist you with status-sensitive information.


3.10 Security Platform Integration Services

The Security Platform Integration Services enable standard applications to use the Trusted Platform Module functionality. This is possible for applications supporting the Microsoft Crypto-API or the PKCS #11 Crypto-API. 

The following Integration Service components are provided:
- Infineon TPM Platform Cryptographic Provider (Platform CSP)
- Infineon TPM Cryptographic Provider (User CSP, without AES support)
- Infineon TPM RSA and AES Cryptographic Provider (User CSP, including AES support. Not available under Windows 2000.)
- Infineon TPM PKCS #11 Provider (also called "TPM Cryptoki Token")


3.11 Security Platform Services

The Security Platform Services provide you with a Trusted Computing Group (TCG) compliant software stack.

The TCG Software Stack (TSS) is built by the following modules:

- TSS (TCG Software Stack) Service Provider
- TSS Core Service
- TSS Device Driver Library

The TCG Software Stack is an integral part of a TCG compliant platform, and provides functions that can be used by enhanced operating systems and applications.

Recommendation:
Contact your product support to check whether a firmware update for your Trusted Platform Module is available.


4. If you have questions

If you have any questions or problems, please contact your dealer first.
Further information and support is available under http://www.infineon.com


5. Release Info

5.1 Primary new Features

This release includes the following primary new features:
- TBS (including TPM.sys) is used on TPM 1.2 systems with proper BIOS integration.
- Some basic support of User Account Control (UAC) is included.


5.2 About this Release

This release contains the following components to enable access to the Trusted Platform Module by application (utilizing the interfaces as specified by TCG, Microsoft® Crypto-API and PKCS#11):

- Security Platform Help
- Security Platform Settings Tool
- Security Platform Initialization Wizard
- Security Platform User Initialization Wizard
- Security Platform Migration Wizard
- Security Platform Backup Wizard
- Security Platform Password Reset Wizard
- Security Platform PKCS #12 Import Wizard
- Security Platform Certificate Viewer and Certificate Selection
- Security Platform Taskbar Notification Icon
- Security Platform Integration Services
    * Microsoft® Outlook® Integration
    * Netscape® Integration
    * Encrypted File System Integration (not supported under Windows XP Home)
    * Personal Secure Drive
    * Policy Administration
- Security Platform Services
    * TSS (TCG Software Stack) Service Provider
    * TSS Core Service
    * TSS Device Driver Library


5.3 Hardware and Software Platform Requirements

Operating Systems (only for 32-bit product version):
- Microsoft Windows XP Professional Service Pack 2
- Microsoft Windows XP Home Edition Service Pack 2
- Microsoft Windows XP Media Center Edition 2005
- Microsoft Windows XP Tablet PC Edition 2005
- Microsoft Windows Server 2003 Service Pack 1
- Microsoft Windows 2000 Professional Service Pack 4 with Microsoft Internet Explorer 5 or higher
- Microsoft Windows Vista

Operating Systems (only for 64-bit product version):
- Microsoft Windows XP Professional x64 Edition Service Pack 1 (AMD64)
- Microsoft Windows Server 2003 x64 Edition (AMD64)
- Microsoft Windows Vista

Microsoft Office:
- Microsoft Office 2000 SR-1 or higher
- Microsoft Office XP
- Microsoft Office 2003

Netscape:
- Netscape Communicator 7.2 and 4.79

<BEGIN_VERSION2>HP ProtectTools Security Manager<END_VERSION2>

Hardware Requirements:
- A PC capable to run one of the mentioned operating systems and equipped with a Trusted Platform Module.


5.4 Version Information	

Infineon TPM Professional Package V3.0


5.5 Trusted Platform Module Firmware Upgrade

After installation, it is recommended to check whether a firmware update is available provided by http://www.infineon.com


5.6 Known Bugs and Limitations

5.6.1 Problems with the Trusted Platform Module:

In case an application using the Trusted Platform Module fails, resetting the Trusted Platform Module may solve the problem.
To reset the Trusted Platform Module, shut down the PC (turn off the computer after the system has shut down) and start the PC again.


5.6.2 Known Online Help Error

After installation of Microsoft security updates, the Security Platform Help may not function correctly when the .chm file is opened from a remote location. Further information is available in the Microsoft Knowledge Base, e.g. in Microsoft Security Bulletin MS05-026 and in Microsoft Knowledge Base Article 896358.


5.6.3 No support for saving Personal Secure Drive content to a CD data disc at Windows XP

On XP Windows, Explorer supports to write data directly to CD data discs with Joliet and ISO-9660 file systems.
During the process of deleting a Personal Secure Drive, it is not supported to select such a CD data disc for saving the content of the Personal Secure Drive. If you want to save the content of a Personal Secure Drive to a CD data disc, use Windows Explorer directly before deleting the Personal Secure Drive.


5.6.4 Personal Secure Drive and Windows XP System Restore 
 
If you enabled System Restore please note that Personal Secure Drive is like any other drive on your computer monitored by System Restore.
To ensure that System Restore is working properly with your Personal Secure Drive consider the following:
 
a) Personal Secure Drive with a size up to 200 MB
You need to install Microsoft Hotfix WindowsXP-KB888402-x86-xxx.exe (where xxx is the language specific version).
This hotfix is only available for Windows XP SP2 via Microsoft support (http://support.microsoft.com). Please refer to KB888402.
If you do not install this hotfix, System Restore Points are deleted every time you load your PSD drive.
 
b) Personal Secure Drive with a size bigger than 200 MB
Personal Secure Drive bigger than 200 MB will be handled as every other drive which is of "local disk" type.
To ensure that System Restore is working properly please consider the disk space requirements of System Restore.
Following these requirements leave at least 80 MB free disk space on a Personal Secure Drive.
 
 
5.6.5 Timeout in user authentication for WLAN client connection

You need to authenticate to establish a WLAN client connection. Security Platform User Authentication is displayed. Please authenticate within 30 seconds.
Else the WLAN client connection might fail. To enable the WLAN client connection after a timeout, click "Repair" in the WLAN connection's context menu. You do not need to logoff, logon and authenticate again in this case.


5.6.6 Possible user authentication problem in "Run as" mode

Under certain circumstances, an internal error will be returned when the user authentication dialog is expected. This error might occur if all of the following conditions are met:
- The program requiring the user authentication (e.g. User Initialization Wizard) was started in "Run as" mode.
- A certain version of the software "PGP" is installed, e.g. V9.04.
- There was no preceding user authentication in the current logon session.


5.6.7 Dictionary Attack behavior after upgrade from version 2.0

On Infineon Trusted Platform Module 1.2 systems which have been upgraded from Infineon Security Platform Software 2.0 the dictionary attack behavior has to be explicitly initialized by performing a defense level reset. Please start the Security Platform Initialization Wizard SpTPMWz.exe with the command line parameter -resetattack or /resetattack. Else the dictionary attack behavior is not as described in the online help. For example, the Security Platform is not temporarily disabled after multiple wrong authentication attempts.


5.6.8 Changing the system time may cause unexpected behaviour

Rolling back the system time may cause unexpected behaviour of the Infineon Security Platform software. Restarting the 
system will correct this behaviour.


5.6.9 Security Platform User Initialization may fail

Under certain circumstances, an error message will be shown at the first Security Platform User Initialization during EFS/PSD feature configuration ("An internal error occurred. An unexpected error occurred.").
To work around that problem, open User Initialization Wizard again, configure EFS/PSD anew with a new created certificate -or- use/create another user account.


5.6.10 Performing Emergency Recovery from a given Backup Archive more than once has the following restriction

Users which were not selected to be restored during Emergency Recovery and users which were selected but did not complete the restoration process cannot be selected during subsequent restorations. Create a copy of the backup archive to circumvent this.


5.6.11 Setup Repair Mode under restricted administrative account in Windows Vista

Users with restricted administrative account in Windows Vista will get an error message stating "Installation of Security Platform Software requires administrative permissions" while trying to repair the Infineon Security Platform Solution software through control panel, and the setup will abort. Please start setup repair mode by clicking on setup.exe in the CD-image.


5.6.12 Operating System upgrade to Windows Vista

a) If you currently have a lower version of Infineon TPM Professional Package V3.0 installed on your system, then you cannot directly upgrade the operating system to Windows Vista. First you need to upgrade to Infineon TPM Professional Package V3.0 and then perform operating system upgrade to Windows Vista.

b) After you upgrade the operating system from Windows XP to Windows Vista on a system that has Infineon TPM Professional Package V3.0 installed, unexpected User Authentication dialogs are displayed whenever an administrative user logs on to the system who was already initialized for using EFS with Security Platform. To prevent these dialogs from being displayed each time the administrative user logs on, follow the steps mentioned below:
   1. Start configuration of user setting from Infineon Security Platform Settings Tool and select the feature "File and folder encryption with Encryption File System (EFS)".
   2. On next page "Encryption Certificate" click on "Select".
   3. Create a new TPM certificate by clicking on "Create" and select this new certificate.
   4. Configure EFS and finish User Initialization Wizard. 
   5. Start configuration of user setting from Infineon Security Platform Settings Tool again and select the feature "File and folder encryption with Encryption File System (EFS)".
   6. On next page "Encryption Certificate" click on "Select".
   7. Select the original TPM certificate which was used before step 3 again.
   8. Configure EFS and finish User Initialization Wizard.


5.6.13 WLAN support on Windows Vista

Infineon TPM Professional Package V3.0 does not support WLAN on Windows Vista Operating System.


5.6.14 Server mode support

Server mode is not supported by this version.


5.6.15 Personal Secure Drive and Norton Internet Security 2007 (R)

If you use Infineon TPM Professional Package on a system that has Norton Internet Security 2007 (R) running, you may encounter one of following issues during PSD creation and loading.
- System restarts unexpectedly
- System hangs up
- Blue screen appears with "STOP:0x0000004E PFN_LIST_CORRUPT" message

To work around this issue, remove the check mark of "Scan removable media for boot viruses when media is inserted" in "REAL-TIME PROTECTION - General Settings" of Norton Internet Security 2007 (R).
