TCG Certification Programs

TCG offers certification programs to promote consistent quality among products built to TCG specifications. This provides a useful tool to assist customers in verifying security and functional compliance of products built to TCG specifications.

TCG currently offers certification programs in three areas – Trusted Platform Modules (TPM), Trusted Network Communications (TNC) and Storage Devices.


Trusted Platform Module (TPM) Certification

TPM Certification allows TCG members to demonstrate that their TPM product meet a set of Compliance and Security Evaluation requirements that was developed with TCG membership and industry participation input. TPM products passing certification are listed on the Certified Products List. TPM certification is a benefit of TCG membership and therefore membership is required.

The certification requirements for a member’s TPM product to achieve TCG Certification include:

TPM Compliance Testing

The TPM Compliance Test Suite is available to TCG members to validate compliance of TPM products against TCG Specifications. Functional testing is performed via self-test by TCG members using a TCG-developed automated PC Client TPM Compliance Test Suite, according to a test plan documented by the TCG. The TCG Certification Program Manager verifies that the test suite results indicate that the product passed the tests, but does not perform validation of the test suite execution against the product itself. Compliance Test Suites are available to all TCG members for validation of their vendor products against the TCG Specifications.

TPM Security Evaluation

TCG members are required to demonstrate successful Common Criteria certification of their TPM product.

For the TPM 1.2 Family, the Common Criteria Security Assurance Level is at EAL4+ Moderate, in accordance to the PC Client TPM 1.2 Protection Profile by the TCG.

For the TPM 2.0 Family, the Common Criteria Security Assurance Level is at EAL4+ Moderate, in accordance to the PC Client TPM 2.0 Protection Profile by the TCG.

Note: Products may be posted on the Certified Products List with a status of “In Progress” if preliminary approval has been granted by the Common Criteria testing organization, and the product has successfully completed Compliance testing and the TCG application process.


Trusted Network Communications (TNC) Certification

TNC Certification allows TCG implementers to demonstrate that network communication products meet a set of Compliance and Interoperability requirements that were developed with TCG membership and industry participation input. TNC products passing certification are listed on the Certified Products List. TNC Certification is open to both TCG members and non-TCG members.

The certification requirements for TNC products to achieve TCG Certification include:

TNC Compliance Testing

TNC Compliance Test Suites for the following TNC interfaces are available to validate compliance of products against the TCG Specifications:

  • IF-MAP, IF-PEP, IF-IMC, and IF-IMV

Functional testing is self-tested by implementers using a TCG developed automated TNC Compliance Test Suite. The TCG Certification Program Manager verifies that the TCG implementer’s test suite results concur with the expected results.

TNC Interoperability Testing

TNC implementers are also required to demonstrate interoperability at TNC Plugfests. Interoperability testing must be done at a TNC Plugfest as coordinated by TCG on an ad hoc basis. Generally, when there is adequate interest from enough parties, an event shall be scheduled. These plugfests are funded by the attendees.

TNC Certification Program Resources

  • TNC Certification Program Suite 1.1
  • TNC IF-PEP for Radius Test Plan
  • Compliance TNC Interoperability Test Plan
  • TNC IF-IMC Compliance Test Plan
  • TNC IF-IMV Compliance Test Plan
  • TNC IF-MAP 2.0 Compliance Test Plan
  • TNC IF-MAP Network Security Compliance Test Plan


Storage Certification

Storage Certification allows TCG members to demonstrate that their storage products meet a set of Compliance and Security Evaluation requirements that was developed with TCG membership and industry participation input. Storage products passing certification are listed on the Certified Products List. Storage certification is a benefit of TCG membership and therefore membership is required.

The certification requirements for a member’s storage product to achieve TCG Certification include:

Storage Compliance Testing

The certification specification for the Opal SSC (Security Subsystem Class) is available on the TCG website. A Storage Certification Workshop is held to certify the test suites generated by the test vendors. Using a certified test suite, the storage device can validate the compliance of the implementation to the certification specification. Drive makers can become certified via one of three paths, which will only be available to members:

  • A TCG-hosted storage compliance workshop
  • Third-party test labs
  • Self-certification
  • Security Evaluation

TCG members are required to demonstrate successful Common Criteria certification based on Common Criteria Full Disk Encryption (FDE) Encryption Engine (EE) collaborative Protection Profile (cPP).


Certification Program Resources

The Certification Program Committee has made the resources below available to the public for their education and to increase customer understanding in the procedures and principles used to develop each program.

Contact certification@trustedcomputinggroup.org for more information.

Join

Membership in the Trusted Computing Group is your key to participating with fellow industry stakeholders in the quest to develop and promote trusted computing technologies.

Join Now

Trusted Computing

Standards-based Trusted Computing technologies developed by TCG members now are deployed in enterprise systems, storage systems, networks, embedded systems, and mobile devices and can help secure cloud computing and virtualized systems.

Read more

Specifications

Trusted Computing Group announced that its TPM 2.0 (Trusted Platform Module) Library Specification was approved as a formal international standard under ISO/IEC (the International Organization for Standardization and the International Electrotechnical Commission). TCG has 90+ specifications and guidance documents to help build a trusted computing environment.

Read more
Please wait...

Subscribe to our newsletter

Want to be notified when our article is published? Enter your email address and name below to be the first to know.