Virtualized Platform
Mission
The Virtual Platform Working Group (VPWG) investigates guidance and standards to provide evidence needed by relying parties who wish to establish trust in virtualized platforms.
What the group does
The VPWG recognizes that there are serious, practical limitations associated with a hypervisor making its physical TPM visible and shareable by all of its guests. Therefore, the VPWG explores ways to utilize the various roots of trust that the hypervisor has access to in a targeted fashion along with a virtual TPM dedicated to each guest.
The VPWG is developing a specification that standardizes a specific technical approach for a hypervisor to leverage a physical TPM to provide additional evidence to relying parties of a guest OS spawned by the hypervisor so that these relying parties can gain a heightened level of trust in the guest's virtual TPM.
Why it matters
VPWG seeks to provide the ability for a relying party to develop the same level of trust in a virtual platform as a physical platform.
Who participates
The VPWG has enjoyed a wide variety of participation. We have participation from companies that offer traditional bare metal computing platforms which often form the underlying basis for hosting virtualized platforms, companies that offer networking solutions, and companies that offer virtualization products and services, including virtualized TPMs. We have participation from people with a broad interest in the fundamental concept of a trusted computing platform.
Key deliverables
Virtualized Trusted Platform Architecture Specification and associated FAQ (updates are planned). Specifications and associated guidance documents are in progress.
Technology the group develops
We consume existing TCG technology like physical TPMs, platform identities like EK certificates, and Attestation Keys.
Explore other Work Groups
Network Equipment Work Group is focused on requirements and use cases, and is providing security best practices, recommendations and specifications.
Provides definitions, specifications, guidelines, and technical requirements as they pertain to the implementation of TCG technology in servers.
The IoT Sub Group provides guidance on how Trusted Computing can be used for securing IoT.
Software specification that provides a standard API for accessing the functions of the TPM.
Become part of TCG
Membership is open to corporations, start‑ups, government, academia, and non‑profits. Join to influence specs in Work Groups, access drafts, network with experts, and submit products for TCG Certification.