DataTerminology.comNEW
Also known as: TPM
A hardware-based cryptoprocessor and standard enabling secure key storage, attestation, and platform integrity.
DESCRIPTION
TPM is a standardized secure microcontroller that stores cryptographic keys and supports integrity measurements via Platform Configuration Registers (PCRs). It enables measured boot, attestation, and key sealing. Operating systems use TPM for disk encryption (e.g., BitLocker) and credential protection. TPM 2.0 expands algorithms and flexibility over 1.2. Implementations follow Trusted Computing Group specifications.
ALTERNATIVE DEFINITIONS
Microsoft Learn
A Trusted Platform Module (TPM) is a secure cryptoprocessor designed to enhance the security of the device.
Defines TPM as secure hardware supporting device security.
Trusted Computing Group
The TPM Library Specification defines the functionality of the Trusted Platform Module, including commands, structures, and algorithms.
Standard specification outlining TPM functions and interfaces.
IBM
A Trusted Platform Module (TPM) provides hardware-based security functions, including secure key storage and platform attestation.
Highlights secure key storage and attestation capabilities.
RELATED TERMS
Secure Boot Measured Boot Platform Attestation BitLocker UEFI Key Sealing Attestation FIPS 140-3 PCRs
COMPETING TERMS
KNOWLEDGE AREAS
Data Security Infrastructure Data Privacy & Compliance
TARGET AUDIENCE
Security Architect Cybersecurity Engineer Hardware Engineer IT Manager Cloud Architect
EXTERNAL SOURCES
- Wikipedia - Trusted Platform Module
- Trusted Computing Group - Official TPM 2.0 specification
- Microsoft - Overview of TPM in Windows
- tpm2-tools - Linux TPM 2.0 tooling docs
TOP QUESTIONS
What does Trusted Platform Module provide?
Hardware-backed key storage, integrity measurements, attestation, and cryptographic operations to secure platforms.
Category: Definition
How is TPM used in disk encryption?
BitLocker and similar systems use TPM to protect keys and verify platform state before unlocking encrypted volumes.
Category: Example
What’s the difference between TPM 1.2 and 2.0?
TPM 2.0 improves algorithm support, authorization flexibility, and capabilities compared to TPM 1.2.
Category: Overview
How does TPM support Secure Boot or Measured Boot?
TPM stores integrity measurements in PCRs, enabling verification of boot components and attestation of platform state.
Category: Requirements
What risks exist with TPM deployments?
Misconfigured policies, outdated firmware, or reliance without attestation can weaken assurances. Physical attacks remain a concern.
Category: Risks
Is TPM a cryptographic accelerator?
No. TPM focuses on secure key management and attestation, not high-throughput cryptography.
Category: Misunderstanding
What is a counterpart technology to TPM?
Hardware Security Modules provide secure key management at data center scale, complementing endpoint TPMs.
Category: Alternatives
How do I interact with TPM on Linux?
Use tpm2-tools and the TSS stack to perform operations like key creation, sealing, and PCR reads.
Category: Management
Where did TPM originate?
The Trusted Computing Group standardized TPM to enhance platform trust and security.
Category: Origin