TCG Design, Implementation, and Usage Principles (Best Practices)
The TCG Design, Implementation, and Usage Principles document, version 2.0 lays out the principles underlying the design of the TCG specifications.
The Trusted Computing Group (TCG) has set for itself the ambitious goals to improve the security of the platform and infrastructure while:
1. Preserving privacy, backward compatibility, and owner control
2. Promoting ease-of-use
3. Designing the technology so that it is interoperable
4. Ensuring that the user's data, while secure and protected, remains portable and accessible as needed in alternative modalities
Many of these principles are already inherent in the TCG specifications. The initial release of the TCG Design, Implementation, and Usage Principles document applied to implementations based on TPMs. This updated version applies to implementations based on all TCG specifications, whether hardware or software based TCG technology.
Design, Implementation, and Usage Principles FAQ
Q. What is the TCG Design, Implementation, and Usage Principles (Best Practices) document?
A. The TCG Best Practices document was created to provide recommendations and guidelines for best practices for developers, implementers, and business users of TCG technology. Such provision of best practices is a time-honored industry practice.
Q. Why has TCG published this?
A. The provision of a design rationale and "application notes" is a well-established process for component designers. In keeping with that, TCG created the Design, Implementation and Usage Principles document to provide industry with a set of guidelines and recommended "best practices" for the development, implementation, and use of the Trusted Computing specifications and technologies.
Q. Is this document intended for TCG members only?
A. No, the document is public for developers, implementers and users who may or may not be TCG members.
Q. When will TCG update this document?
A. The most recent document covers available TCG technologies. As technologies and specifications evolve, we will examine the document and determine if and when to update it.
Q. Does the document include input from any external organizations?
A. Yes. A number of public policy organizations and some government bodies provided input to earlier draft versions of the document. In addition, Version 1.0 has been public since June 2005, and there have been public comments on it since then.