EK-Based Key Attestation with TPM Firmware
Specification
This document provides guidance to TPM key-attestation verifiers who would like to receive a trustworthy signal of the TPM’s current firmware version before trusting the attested key. An example of where this might be useful is if the verifier wants to include the TPM’s current firmware version as metadata in an Attestation Key (AK) credential based solely on trust in the TPM’s Endorsement Key (EK).
Explore other documents
Errata
Errata for TPM Library Specification 2.0
Specification
TPM 2.0 Library
Registry
Vendor ID Registry
Become part of TCG
Membership is open to corporations, start‑ups, government, academia, and non‑profits. Join to influence specs in Work Groups, access drafts, network with experts, and submit products for TCG Certification.