Storage
Mission
The Storage Work Group's objective is to define specifications and accompanying documents for building and managing storage devices that enforce policy controls as set by hosts across a wide range of storage transport command protocols.
What the group does
The Storage Work Group deliverables include specifications that define functional security requirements for storage devices; test cases and certification process documents; and informative supporting documents.
Why it matters
The Storage Work Group defines open, interoperable security standards that protect the confidentiality of data at rest against unauthorized access once it leaves the owner's control. These standards enable interoperability between multiple Storage Device vendors.
Who participates
Participation in the Storage Work Group includes storage device manufacturers, storage subsystem manufacturers, software vendors, and designers of custom, highly integrated components. Storage and security management and storage integration vendors also participate. A complete list of current TCG members is available at www.trustedcomputinggroup.org.
Key deliverables
- TCG Storage Architecture Core: Defines a comprehensive architecture for controlling Storage Devices through policy-driven access control.
- TCG Storage Interface Interactions Specification (SIIS): Defines how TCG storage security protocols integrate with industry-standard storage interfaces and transports.
- TCG Storage Security Subsystem Class (SSC): Provides a suite of secure storage specifications that enable capabilities such as hardware-based data encryption, configurable access controls, and pre-boot authentication to address a range of host security requirements.
- TCG Storage Feature Sets: Define capabilities that extend or modify a Security Subsystem Class (SSC).
- TCG Storage Test Cases: Defines standardized test procedures for validating compliance with a SSC.
Technology the group develops
The Storage Work Group primarily develops Security Subsystem Classes (SSCs), including specifications that provide capabilities such as hardware-based data encryption, configurable access controls, pre-boot authentication, and secure storage device repurposing. The Work Group also develops complementary specifications for media sanitization, exclusive and joint authorization of encrypted user data, configurable namespace security, and logical port access control. Together, these technologies provide standardized mechanisms for implementing storage security and management policies across diverse host and storage device use cases.
Storage — Standards & Resources Overview
Explore storage standards, feature sets, and profiles used to secure storage devices and systems.
23 resources
SSC
SIIS
KPIO
SID
PSID
PSK
MEK
MBR
LBA
NS
Explore other Work Groups
Network Equipment Work Group is focused on requirements and use cases, and is providing security best practices, recommendations and specifications.
Provides definitions, specifications, guidelines, and technical requirements as they pertain to the implementation of TCG technology in servers.
The IoT Sub Group provides guidance on how Trusted Computing can be used for securing IoT.
Software specification that provides a standard API for accessing the functions of the TPM.
Become part of TCG
Membership is open to corporations, start‑ups, government, academia, and non‑profits. Join to influence specs in Work Groups, access drafts, network with experts, and submit products for TCG Certification.