Fitlet2 TPM

From fit-PC wiki
Jump to: navigation, search

What is TPM?

A Trusted Platform Module (TPM), is a cryptographic coprocessor including capabilities for random number generation, secure generation of cryptographic keys and limitation of their use. It also includes capabilities such as remote attestation and sealed storage. TPM's technical specification is publicly available, driven by the Trusted Computing Group (TCG). The latest version TPM 2.0 (released October 2014), is a major redesign of the specification which adds new functionality and fixes weaknesses of the former TPM 1.2.

dTPM (Discrete Trusted Platform Module)

  • TPM is a microcontroller that stores encryption keys, passwords and digital certificates.
  • When TPM technology first hit the market, it was available only in discrete form.
  • That is, the silicon module was separate from other system elements and communicated with them via a dedicated hardware bus.
  • More recently, silicon manufacturers have begun to integrate TPM functionality into existing parts.
  • Advances in on processor technologies combined with the flexibility of the TPM protocols mean that it is possible to implement the TPM as an integrated solution or in firmware.

fTPM (Firmware Trust Platform Module)

  • fTPM is a Firmware based TPM 2.0 implementation.
  • fitlet2, designed around Apollo Lake's SoC features fTPM as part of Intel® Platform Trust Technology (Intel® PTT)
    • Intel® PTT is a platform functionality for credential storage and key management used by Windows 8 and Windows® 10.
    • Intel® PTT supports BitLocker for hard drive encryption.
    • The platform also supports all Microsoft requirements for firmware Trusted Platform Module 2.0(fTPM).
    • Intel® PTT is an integrated solution in the Intel® Management Engine for 4th Generation Intel® Core™ processors with ultra-low TDP (Thermal Design Power) platforms and later.

For more information please refer to the following - Link