Platform Certificates
Platform Certificates are TCG's supply-chain evidence artifacts that assert the expected composition of a specific platform: the Roots of Trust it contains, such as TPM or DICE, its Trusted Building Blocks, and its component inventory down to manufacturer, model and serial number. Delta Platform Certificates record changes made after manufacturing by system integrators, resellers or other supply-chain entities.
Core capabilities
What Platform Certificates deliver
A signed record of where a platform came from and what it was built with.
Declares which components make up the platform, down to model and serial number.
States which trust anchors the platform contains, such as a TPM or a DICE implementation.
Component data structured so it can feed HBOM-based security and compliance workflows.
Delta certificates record modifications made after the platform left the factory.
Verifiers use the certificate as a trusted reference when evaluating attestation evidence.
Trust in a certificate depends on who issued it and on the policy of the party relying on it.
Connects the platform, its parts, and its measured state into a single chain of evidence.
[ 01 ]
A signed record of where a platform came from and what it was built with.
Declares which components make up the platform, down to model and serial number.
States which trust anchors the platform contains, such as a TPM or a DICE implementation.
Component data structured so it can feed HBOM-based security and compliance workflows.
Delta certificates record modifications made after the platform left the factory.
Verifiers use the certificate as a trusted reference when evaluating attestation evidence.
Trust in a certificate depends on who issued it and on the policy of the party relying on it.
Connects the platform, its parts, and its measured state into a single chain of evidence.
OEM-issued platform provenance.
Component inventory verification.
Attestation appraisal using platform endorsements.
Tracking platform changes after manufacturing.
Enterprise procurement and asset validation.
Integration of Roots of Trust into platform-level evidence.
HBOM-oriented security and compliance workflows.
Primary features
Key capabilities of the Platform Certificate profile
[ 01 ]
Certificate profile for representing platform composition
[ 02 ]
Support for unique Roots of Trust such as TPM and DICE
[ 03 ]
Support for Trusted Building Block representation
[ 04 ]
Component list and component attributes
[ 05 ]
Delta Platform Certificate model
[ 06 ]
Issuer and trust-chain model
[ 07 ]
Use as an endorsement in attestation workflows
[ 08 ]
Compatibility with verifier appraisal policy and relying-party policy
Certificate profile for representing platform composition
A defined format for expressing what a platform contains, readable by any compliant verifier.
Support for unique Roots of Trust such as TPM and DICE
The certificate can name the specific trust anchors present on the platform.
Support for Trusted Building Block representation
Declares the trusted components a platform is built from beyond its Roots of Trust.
Component list and component attributes
Records each component with attributes such as manufacturer, model, serial number, and MAC address.
Delta Platform Certificate model
A mechanism for recording post-manufacturing changes without reissuing the original certificate.
Issuer and trust-chain model
Defines who can issue certificates and how trust flows from issuer to relying party.
Use as an endorsement in attestation workflows
The certificate serves as the endorsement a verifier checks evidence against.
Compatibility with verifier appraisal policy and relying-party policy
Designed to fit existing appraisal and policy models rather than imposing a new one.
capability 01
Work Groups
Related TCG Work Groups that leverage Platform Certificates
Infrastructure
Provides the primary context for platform credentials, endorsement credentials, enrollment, and supply-chain trust infrastructure.
Attestation
Uses Platform Certificates as endorsements that a Verifier may evaluate when appraising evidence from an Attester.
Trusted Platform Module (TPM)
Provides TPM identities and endorsement structures that can be represented or referenced by Platform Certificates.
Device Identifier Composition Engine (DICE)
Provides DICE-based Roots of Trust and identities that Platform Certificates can describe.
Other Work Groups
PC Client, Server, IoT, Vehicle Services, Network Equipment, Mobile, and CyRes Work Groups can use Platform Certificates for platform provenance, component inventory, and trusted lifecycle evidence.
Reference sources
Explore the Platform Certificate documentation
TCG Platform Certificate Profile
Defines the certificate format used to assert platform composition and Roots of Trust.
View moreInfrastructure CMC Profile for EK/Platform Certificate Enrollment for TPM v1.2
Defines the enrollment process for endorsement and platform certificates on TPM 1.2 platforms.
View moreTCG Reference Integrity Manifest (RIM) Information Model
Defines the reference values that complement Platform Certificates when comparing expected and actual platform state.
View moreReference sources
Explore the Platform Certificate documentation
Explore other Technologies
Trusted Platform Module (TPM)
TCG's standardized hardware Root of Trust for protecting keys, recording platform measurements and supporting attestation across every class of device.
Block Integrated Trust (BIT)
TCG's component-level hardware Root of Trust for constrained devices, giving integrated components their own identity and attestation.
Storage Security
TCG's architecture for interoperable security on trusted storage devices: self-encrypting drives, access control, locking and Opal, Ruby and Opalite classes.
Explore other Technologies
Trusted Platform Module (TPM)
TCG's standardized hardware Root of Trust for protecting keys, recording platform measurements and supporting attestation across every class of device.
Block Integrated Trust (BIT)
TCG's component-level hardware Root of Trust for constrained devices, giving integrated components their own identity and attestation.
Storage Security
TCG's architecture for interoperable security on trusted storage devices: self-encrypting drives, access control, locking and Opal, Ruby and Opalite classes.
Become part of TCG
Membership is open to corporations, start‑ups, government, academia, and non‑profits. Join to influence specs in Work Groups, access drafts, network with experts, and submit products for TCG Certification.