Trusted Computing Platforms: TCPA Technology in Context
by Siani Pearson, Boris Balacheff, Liqun Chen, David Plaquin, Graeme Proudler
Signing with TPM Identities
TPM identity keys are used to sign certain data structures generated by the TPM; hence, they vouch for the validity of that data. These capabilities can use TPM identity keys for signatures:
TPM_ChangeAuthAsymStart certifies that a temporary key can be used to change a TPM object's authorization data and hides the new value from the owner of the parent TPM object.
TPM_Quote certifies the current values of the platform configuration registers.
TPM_CertifyKey certifies the properties of a key.
TPM_CertifySelfTest certifies the results of a TPM self-test.
TPM_GetCapabilitySigned certifies the capabilities of the TPM.
TPM_GetAuditEventSigned certifies the events currently being audited by a TPM.
TPM identities deliberately ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access