Trusted Platform Module (TPM)
Mission
The Trusted Platform Module Work Group (TPMWG) develops and maintains the core specifications for Trusted Platform Modules (TPMs). Its mission is to provide a common, vendor-neutral foundation for hardware-backed roots of trust that can be implemented across personal computers, servers, automotive and other embedded systems, virtualized environments, storage devices, and other computing platforms.
What the group does
The TPMWG defines the architecture, data structures, commands, authorization schemes, and cryptographic behavior of TPM technology. It cultivates the TPM 2.0 Library Specification, provides clarification and correction to the specification through Errata, and works with other workgroups within TCG to ensure that TPM capabilities support the security needs of different platforms. The TPM Work Group also develops and maintains reference code for the TPM Library Specification.
Why it matters
Modern devices need to protect cryptographic keys, provide evidence to users of their state through cryptographic attestation, protect credentials, and protect sensitive operations in the face of determined attackers. A TPM provides a protected root of trust that systems can use to establish device identity, safeguard keys, record evidence of a device's secure initialization, and support attestation operations that verify a device is in a secure state.
By defining consistent, interoperable TPM behaviors and capabilities, the TPM Work Group enables hardware manufacturers, platform vendors, operating system developers, security software providers, and end-users to build security solutions that work across products in a vendor-agnostic manner.
Who participates
TPM Work Group participants include TPM and semiconductor manufacturers, system-on-chip developers, platform and device manufacturers, firmware and operating system developers, security software providers, cloud and virtualization experts, security evaluators, researchers, government, industry, and academic security experts.
The TPM Work Group collaborates with TCG groups responsible for PC clients, servers, automotive and other embedded systems, virtualized environments, storage devices, TPM software stacks, infrastructure, security evaluation, and attestation, as well as external standards organizations.
Key deliverables
- TPM 2.0 Library Specification: Defines the core TPM architecture, structures, commands, and behavior.
- Errata for TPM 2.0 Library Specification
- Reference code for the TPM 2.0 Library Specification
- Trusted Platform Module 2.0: A Brief Introduction
- A Practical Guide to TPM 2.0
- EK-Based Key Attestation with TPM Firmware
Explore other Work Groups
Network Equipment Work Group is focused on requirements and use cases, and is providing security best practices, recommendations and specifications.
Provides definitions, specifications, guidelines, and technical requirements as they pertain to the implementation of TCG technology in servers.
The IoT Sub Group provides guidance on how Trusted Computing can be used for securing IoT.
Software specification that provides a standard API for accessing the functions of the TPM.
Become part of TCG
Membership is open to corporations, start‑ups, government, academia, and non‑profits. Join to influence specs in Work Groups, access drafts, network with experts, and submit products for TCG Certification.