Fitlet2 TPM

From fit-PC wiki
Jump to: navigation, search

What is TPM?

  • A Trusted Platform Module (TPM), is a cryptographic coprocessor with capabilities of random number generation, secure generation of cryptographic keys and managed access to these keys. It includes additional capabilities such as remote attestation and sealed storage.
  • TPM technical specifications are publicly available, driven by the Trusted Computing Group (TCG).
  • TPM 2.0 (released October 2014) adds new functionality and fixes weaknesses of the former TPM 1.2.

dTPM (Discrete Trusted Platform Module)

  • Discrete TPM is a microcontroller that stores encryption keys, passwords and digital certificates.
  • fitlet2 can be ordered with an optional discrete TPM.

fTPM (Firmware Trust Platform Module)

  • fTPM is a Firmware based TPM 2.0 implementation.
  • Intel® PTT is an integrated solution in the Intel® Management Engine.
    • The platform supports Microsoft requirements for firmware Trusted Platform Module 2.0 (fTPM).
      Specifically it supports credential storage and key management as used by Windows 8 and Windows® 10.
    • Also possible in Linux to encrypt partitions using LUKS (Linux Unified Key Setup).
      See Linux: Full Disk Encryption
    • Intel® PTT supports BitLocker for hard drive encryption.
  • fitlet2 is based on Intel Apollo Lake SoC, featuring Firmware TPM as part of Intel® Platform Trust Technology (Intel® PTT)

For more information please refer to - Intel TPM information