If you specify that encryption keys cannot be migrated, the private portion of the key is never exposed outside the TPM.Ĭomputers that incorporate a TPM can also create a key that is wrapped and tied to certain platform measurements.
If you specify that they can be migrated, the public and private portions of the key can be exposed to other components, software, processes, or users. You can specify whether encryption keys that are created by the TPM can be migrated or not. The private portion of a storage root key or endorsement key that is created in a TPM is never exposed to any other component, software, process, or user. Each TPM has a master wrapping key, called the storage root key, which is stored within the TPM itself. This process, often called wrapping or binding a key, can help protect the key from disclosure.
The TPM is installed on the motherboard of a computer, and it communicates with the rest of the system by using a hardware bus.Ĭomputers that incorporate a TPM can create cryptographic keys and encrypt them so that they can only be decrypted by the TPM.
#TRUSTED PLATFORM MODULE 1.2 DOWNLOAD PROFESSIONAL#
This article for the IT professional provides a description of the components of the Trusted Platform Module (TPM 1.2 and TPM 2.0) and explains how they are used to mitigate dictionary attacks.Ī Trusted Platform Module (TPM) is a microchip designed to provide basic security-related functions, primarily involving encryption keys.
0 kommentar(er)
