Develop Security Standards
We create open specifications for trusted computing, from the TPM to network security and self-encrypting drives. Our TPM 2.0 specification is now an international ISO/IEC standard.
About Trusted Computing Group
The foundations of trust
TCG's work is organized in three levels. Trust services put security to work, platform specifications bring it to every type of device, and core technologies anchor it in the hardware.
Trust Services
Turning trust into real-world security
Attestation, resilience, secure software interfaces, interoperability and data center security put trust to work across hardware, software and networks. Each of these services builds on TCG platform standards and, ultimately, on a hardware Root of Trust.
5 trust services
Trust Foundation
Creating a common foundation across industries
From PCs and the cloud to connected devices and vehicles, technology runs on complex ecosystems. TCG platform specifications unite these industries around common, vendor-neutral standards, so the same trust services can be built into any product.
7 platforms
Hardware Roots of Trust
Anchoring trust in the hardware
At the base of the stack, TCG core technologies anchor trust in a device's hardware. They give systems a protected place to keep identities, cryptographic keys and other critical secrets, and a reliable starting point for every layer above.
3 core technologies
Our Mission
Trusted Computing Group is a not-for-profit organization that develops open, vendor-neutral, global industry standards anchored by hardware-based Roots of Trust.
Promote Trusted Technologies
We drive the adoption of trusted computing across PCs, servers, storage, mobile, embedded systems, and cloud, helping reduce total cost of ownership and support regulatory compliance.
Collaborate with Industry Leaders
Through our member-driven Work Groups, more than 75 companies co-create the standards that secure the digital ecosystem, from component vendors to software developers and infrastructure providers.
Our history
From Collaboration to Global Standards
[2003] — Trusted Computing Group is announced with membership of 14 companies. TCG structure and vision are created to enable extension of trusted computing beyond the PC into the enterprise. TCG adopts existing specifications for the TPM security chip for clients and publishes as an open industry specification.
[2004] — TCG announces the Trusted Platform Module (TPM) specification 1.2. Manufacturers begin shipping a variety of enterprise desktop and notebook PCs equipped with TPMs and software to enable applications.
[2005] — TPM adoption continues to grow as chipmakers offer discrete and integrated versions for desktop and notebook systems, as well as for servers.
The Storage Work Group begins work on an open industry specification for data “at rest” in a variety of mediums, including hard drives, tape, and flash memory.
The Server Work Group makes its specification for using the TPM in servers available. Vendors begin development of servers that will help ensure a trusted client is connecting to the intended server.
[2006] — Shipments of TPMs for systems are predicted to top some 20 million and virtually every enterprise system shipped from the top 20 vendors contains one of the security chips. The first servers enabled with TPMs begin shipping.
[2007] — The group announces its Trusted Storage specification that enables full security of local drives on PCs. Work continued to extend this trusted storage to other storage devices, including an announcement of the first application note for key management.
[2008] — The organization announces the Japan Regional Forum to help promote and foster development of products and services based on TCG specifications.
The organization announces a deep set of development tools and resources from member companies to help foster development of applications for the TPM.
[2009] — The organization rolls out its first certification program, targeted to TPMs. The program provides a minimum level of required security and helps ensure interoperability and adherence to the TCG specifications.
TPM is recognized as an international standard by ISO. In other international developments, TCG forms a second regional body, the China Regional Forum, for communication and education of the developer and end-user communities.
[2010] — A certification program for TNC is announced. Members show a variety of demonstrations of TNC including those incorporating the Metadata Access Protocol (IF-MAP); demonstrations include integration of physical and IT security and SCADA security.
Estimates of TPMs embedded in various systems approach one billion.
[2011] — TCG’s Trusted Multi-tenant Infrastructure effort unveils use cases for Trusted Computing-enabled security for cloud computing.
A report from the widely regarded Ponemon Institute finds growing acceptance and knowledge of self-encrypting drives with many organizations reporting potential benefits and plans to use such drives.
TCG announces its Trusted Virtualized Platform Architecture to support virtualized systems with trust-based security.
[2012] — TCG announces a new membership option, Associate, targeted to enterprise users, service providers, and to integrators and resellers. TCG also teams with Global Platform Alliance to continue driving mobile platform security solutions.
[2013] — The TPM 2.0 Library specification develops through Revision 0.99. These early versions precede the 2014 public announcement and later ISO/IEC standardization.
[2014] — TCG announces the availability of the TPM 2.0 Library specification. The specification broadens cryptographic algorithm support and enhances authorization and TPM management, extending the technology’s flexibility across different platform types.
[2015] — TCG announces approval of the TPM 2.0 Library specification as an ISO/IEC international standard, designated ISO/IEC 11889:2015.
TCG launches its PC Client TPM 2.0 Certification program. The program extends certification beyond TPM 1.2 and allows manufacturers to demonstrate conformance and security for implementations of the PC Client Platform TPM Profile.
[2016] — TCG announces a certification program for self-encrypting drives based on its Opal Security Subsystem Class specifications. The announced process combines compliance testing with a Common Criteria security evaluation.
[2017] — TCG announces the Device Identifier Composition Engine (DICE) Architecture. Designed for resource-constrained IoT and embedded devices, DICE supports device identity, firmware attestation, and software-update verification.
[2018] — TCG announces availability of its storage certification program and releases storage test cases to support conformance and interoperability for self-encrypting drives. This follows the program announcement made in 2016.
[2019] — TCG announces its Cyber Resilient Technology (CyRes) Work Group. The effort centers on protecting code and configuration, detecting vulnerabilities or corruption, and recovering systems to a known good state after compromise.
TCG publishes the TPM Software Stack 2.0 Enhanced System API (ESAPI) specification, continuing development of standardized software interfaces for TPM 2.0.
[2020] — TCG releases the Feature API (FAPI) standard as the addition completing its TPM 2.0 Software Stack framework. FAPI and the accompanying JSON Data and Policy Language simplify application access to TPM functions and authorization-policy management.
[2021] — TCG publishes DICE Attestation Architecture, which defines attestation for layered DICE systems and X.509 certificate extensions carrying attestation evidence and endorsements.
TCG announces a Supply Chain Security Work Group, applying TCG technologies across the supply chain, including device provisioning and recovery.
[2022] — TCG publishes Cyber Resilient Module and Building Block Requirements. The specification establishes a resilience architecture, building blocks such as watchdogs and latches, and module profiles for different deployment scenarios.
TCG announces its DICE Endorsement Architecture for Devices. The specification supports manufacturers in supplying manifests and endorsement information that verifiers use to assess device identity and integrity.
[2023] — TCG announces educational guidance explaining trusted computing concepts and helping manufacturers choose and implement security technologies for connected devices.
[2024] — TCG publishes PC Client Reference Integrity Manifest Specification Version 1.1. The specification defines PC Client RIM formats and storage requirements for reference data used in validating boot measurements and TPM quotes.
TCG releases its Overview of TCG Technologies for Device Identification and Attestation, adding consolidated guidance on this part of its technology portfolio.
[2025] — DICE Attestation Architecture advances to Version 1.2, continuing TCG’s specification work on evidence and endorsements for layered DICE implementations.
TCG publishes Attestation Framework Part 1, providing common terminology, concepts, and requirements that designers and other TCG specifications can use when developing attestation systems.
[2026] — TCG announces TPM 2.0 Library V 185, adding support for the post-quantum algorithms ML-KEM, including endorsement keys, and ML-DSA, including attestation keys. The specification also adds support for Curve25519 and Curve448.
TCG identifies PC Client Platform TPM Profile 1.07 as the baseline for a PQC-ready TPM and distinguishes PQC-ready implementations from those capable of being upgraded. TCG also announces plans to extend certification a PQC ready TPM.
2003
Trust rooted in hardware, not software alone.
A single foundation of trust across all system scales.
The reference standard for trusted computing worldwide.
Specifications maintained to address evolving threats.
Interoperability across platforms, vendors, and architectures.
Open, vendor-neutral standards free from proprietary lock-in.
Our team
The people shaping trusted computing standards.
TCG is led by a board of Promoter members and elected Contributor advisors. Together, our officers, directors, and Work Group chairs guide the development of open standards and drive their adoption across the industry.
Officers[4]
Directors[11]
Contributor Advisors[1]
FAQ
Frequently Asked Questions
Yes. TCG publishes its specifications openly, free to download and implement for developers, manufacturers and users. The library covers more than 90 specifications and guidance documents.
Membership is open to corporations, start-ups, government bodies, academia and non-profits. TCG offers four levels: Promoter, Contributor, Adopter and Associate. Each carries different rights, from shaping specifications inside Work Groups through to accessing drafts and submitting products for certification.
Specifications are written by members within Work Groups, each focused on a technology or platform area. TCG operates a Board, Committee and Work Group structure with supermajority voting, and applies a reasonable and non-discriminatory patent licensing policy between members.
Yes. TCG runs certification programs for Trusted Platform Module, Trusted Network Communications and Storage Devices. Certified products appear on public Certified Products Lists. TPM and Storage certification are member benefits, while TNC certification is open to members and non-members alike.
Yes. The TPM 2.0 Library Specification was approved as a formal international standard under ISO/IEC. TCG also maintains liaison relationships within the wider standards community, including the IETF and the ISO/IEC JTC1 joint committee.
In enterprise systems, storage devices, networks, embedded systems and mobile devices, and to secure cloud and virtualized environments. Most business laptops and servers shipped today include a TPM, often without the user ever being aware of it.
Become part of TCG
Membership is open to corporations, start‑ups, government, academia, and non‑profits. Join to influence specs in Work Groups, access drafts, network with experts, and submit products for TCG Certification.