Infrastructure
Mission
This Infrastructure Work Group's (IWG) mission is to standardize how platforms establish, measure, communicate, and verify trust, through technologies such as hardware roots of trust, platform identity, and remote attestation, to enable secure, interoperable infrastructure.
What the group does
The Infrastructure Work Group (IWG) develops standards, implementation guidance, and reference architectures that enable trusted computing technologies to interoperate across enterprise, cloud, and data center environments. The group publishes guidance documents that promote consistent implementation of these technologies and produces white papers demonstrating how hardware-rooted trust technologies can help organizations address supply chain security requirements and strengthen the integrity of their computing infrastructure.
Why it matters
As organizations increasingly rely on cloud, edge, and distributed infrastructure, they need a consistent way to establish and verify trust across platforms from different vendors. The Infrastructure Work Group's standards enable interoperable hardware-rooted security, helping organizations strengthen cyber resilience, support Zero Trust architectures, improve supply chain assurance, and make automated trust decisions based on verifiable evidence rather than assumptions.
Who participates
Common participants of the Infrastructure Work Group include TPM and System-on-Chip vendors, Platform OEMs, independent firmware vendors, driver vendors, and OS vendors, as well as government and industry partners looking to drive better endpoint security. The Work Group coordinates with other TCG groups and external industry organizations whose technologies are used in client and server platforms, including the TPM and Storage Work Groups, and organizations responsible for technologies such as UEFI, ACPI, and NVM Express.
Key deliverables
Platform Identity: standardizing how devices securely identify themselves using hardware-based identities, supporting strong machine identity rooted in TPMs and other hardware roots of trust. Examples include:
- TCG EK Credential Profile For TPM
- TPM 2.0 Keys for Device Identity and Attestation
Platform Integrity: enabling systems to report and verify their boot state and runtime integrity, providing standardized evidence that a platform is running trusted firmware and software. Examples include:
- Various Reference Integrity Manifests (RIMs) that are used to verify a device's trust claim
- TCG Class registries that identify the various components that comprise a platform
- Canonical Event Log Format, which standardizes the format and representation of platform event logs, making them consistent, interoperable, and easier to consume across different vendors and ecosystems
Interoperability:
- Example certificates and guidance on interoperability
Technology the group develops
Specifications for Certificates that enable other TCG technologies (e.g., the TPM), Guidance document to enable TCG technologies, Reference Integrity Manifests (RIMs), Standardized attestation formats.
Explore other Work Groups
Network Equipment Work Group is focused on requirements and use cases, and is providing security best practices, recommendations and specifications.
Provides definitions, specifications, guidelines, and technical requirements as they pertain to the implementation of TCG technology in servers.
The IoT Sub Group provides guidance on how Trusted Computing can be used for securing IoT.
Software specification that provides a standard API for accessing the functions of the TPM.
Become part of TCG
Membership is open to corporations, start‑ups, government, academia, and non‑profits. Join to influence specs in Work Groups, access drafts, network with experts, and submit products for TCG Certification.