Members LoginJoin TCG

Trusted Knowledge, Openly Shared

View all resources

Blogs

Trends, technical deep dives, case studies and interviews from across the trusted computing community.

Documents

Searchable by technology and Work Group, with planned ISO/NIST tagging for compliance mapping.

Educational Content

Free courses and hands-on labs covering TPM, cryptography basics, TSS and attestation.

Events & Webinars

Conferences, webinars and Plugfests where the trusted computing community meets.

Github

Reference code, tools and implementations maintained by TCG and its Work Groups.

Guides & White Papers

Use-case explainers, best practices and executive summaries organised by vertical.

Public Review

Draft TCG specifications open for public comment before publication, and how to take part.

View all resources

Our Core Technologies & Standards

View all Technologies

Block Integrated Trust (BIT)

Brings trusted computing principles to block-level storage, enabling integrity, attestation, and protection of data blocks at the device layer.

Cyber Resilient Technologies (CyRes)

TCG's cyber-resilience technology for protecting persistent code, detecting unexpected states, and recovering platforms to a known trusted state.

Device Identifier Composition Engine (DICE)

Device Identifier Composition Engine establishes a unique cryptographic identity for resource-constrained devices and IoT systems with minimal hardware.

Platform Certificates

TCG's provenance artifacts asserting Roots of Trust, Trusted Building Blocks, and component composition for supply-chain assurance and attestation appraisal.

Reference Integrity Manifest (RIM)

Signed, machine-readable reference measurements used to verify a device boots and runs in its expected, trusted state.

Storage Security

TCG's architecture for interoperable security on trusted storage devices: self-encrypting drives, access control, locking, and Opal, Ruby, and Opalite classes.

TPM Software Stack (TSS)

A consistent software interface that lets applications and operating systems interact with TPM hardware across vendors, architectures, and platforms.

Trusted Platform Module (TPM)

Hardware-based root of trust that securely generates and stores cryptographic keys, attesting to the integrity of the platform it runs on.

View all Technologies

Where Experts Drive the Standards

View all Work Groups

Aerospace and Non-Terrestrial Systems Solutions

Attestation

Block Integrated Trust (BIT)

Cyber Resilient Technologies (CyRes)

Device Identifier Composition Engine (DICE)

Greater China

Infrastructure

Internet Of Things (IoT)

Japan

Mobile

Network Equipment

PC Client

Server

Storage

TPM Software Stack (TSS)

Trusted Platform Module (TPM)

Vehicle Services

Virtualized Platform

View all Work Groups

Securing Every Sector, Together

View all industries

Aerospace

Agriculture & Construction

Automotive

Education & Government

Energy & Smart Grid

Finance

Healthcare

Insurance

Manufacturing & Industrial Control

Media & Entertainment

Real Estate & Hospitality

Retail, Logistics & Transportation

Telecommunications

View all industries

Built by the Industry, for the Industry

Join TCG

About us

Learn who we are, how our standards are built, and the people and Work Groups shaping trusted computing worldwide.

Contact

Questions about membership, certification or our specifications? Get in touch with the right team.

Events

Conferences, webinars and Plugfests where the trusted computing community meets.

News

Announcements, specification releases and updates from TCG and its members.

Vulnerability Disclosure Policy

How to report vulnerabilities in TCG specifications and how TCG handles and discloses them.

Join TCG

Be Part of What's Next

Join TCG

Become a Member

Compare membership levels and find the one that matches how much you want to shape the standards.

Certifications

Certify your TPM, storage or network product against TCG compliance and security requirements.

Member Login

Access the member workspace, Work Group drafts and specifications in progress.

Member News

Product launches, milestones and announcements from across the TCG membership.

TCG Members

The companies, research institutions, government agencies and standards bodies building trusted computing together.

Join TCG

Become part of TCG

Join now
Resources/
Documents

Infrastructure CMC Profile for EK/Platform Certificate Enrollment for TPMv1.2 Specification

Specification

Tap to preview
Latest version

Infrastructure CMC Profile for EK/Platform Certificate Enrollment for TPM 1.2 Specification Version 1.0 Revision 5

Last updated:Apr 3, 2013
Apr 3, 2013
46 pages
578 KB
Download

This specification describes methods for Endorsement Key (EK) Credential and Platform Credential enrollment.

It is frequently assumed that EK and Platform Credentials will be issued during the systems supply chain manufacturing processes (e.g. by the TPM manufacturer and OEM respectively), but in practice, this is often not the case. Since AIK and certified key credential issuance depends on the presence of EK/Platform credentials, it is important to provide guidance to those wishing to issue these credentials at various points in the trusted platform lifecycle. That is the aim of this specification.

Previous versions
Apr 3, 2013Endorsement Key (EK) and Platform Certificate Enrollment Specification FAQ - April 2013
Published by Work Group
Infrastructure

Explore other documents

View all

Specification

TCG EK Credential Profile for TPM Family 2.0

The purpose of this document is to define the TPM 2.0 Endorsement Key (EK) Credential. This specification describes the content of the credential and provides…
Work Group

Infrastructure

Last updated

Mar 19, 2026

Specification

DICE Attestation Architecture

This specification defines an attestation architecture for DICE layering architectures and X.509 certificate extensions for attestation Evidence and…
Work Group

Device Identifier Composition Engine (DICE)

Infrastructure

Last updated

Jan 29, 2026

Specification

TCG Platform Certificate Profile

A Platform Certificate asserts that a specific platform contains one or more unique Roots of Trust (TPM, DICE, etc.), Trusted Building Block(s), and a…
Work Group

Infrastructure

Last updated

Jan 27, 2026

Become part of TCG

Membership is open to corporations, start‑ups, government, academia, and non‑profits. Join to influence specs in Work Groups, access drafts, network with experts, and submit products for TCG Certification.

Compare Membership Levels

Shape the future of trusted computing: collaborate on the development of open standards and accelerate their adoption.

trusted computing group

3855 SW 153rd Drive, Beaverton, Oregon 97003, USA

+1‑503‑619‑0562admin@trustedcomputinggroup.org

Newsletter

Get updates on TCG standards, resources, and news.

[01]

Resources

  • Documents
  • Public Review
  • TCG Blog
  • Guides & White Papers
  • Educational Content
  • Events & Webinars

[02]

Standards & Work

  • Technologies
  • Work Groups
  • Industries

[03]

Membership

  • Become a Member
  • Members
  • Member News
  • Certifications

[04]

Organization

  • About TCG
  • News & Press Releases
  • Contact
  • Vulnerability Disclosure Policy
  • Legal Notices
  • Privacy Policy

© 2026 Trusted Computing Group. All Rights Reserved