Infrastructure CMC Profile for EK/Platform Certificate Enrollment for TPMv1.2 Specification

This specification describes methods for Endorsement Key (EK) Credential and Platform Credential enrollment.

It is frequently assumed that EK and Platform Credentials will be issued during the systems supply chain manufacturing processes (e.g. by the TPM manufacturer and OEM respectively), but in practice, this is often not the case. Since AIK and certified key credential issuance depends on the presence of EK/Platform credentials, it is important to provide guidance to those wishing to issue these credentials at various points in the trusted platform lifecycle. That is the aim of this specification.