Summary

TPMs have an unusual method of reliably recording and reporting the results of integrity measurements (also known as TCPA authenticated boot). The process is unusual because it saves a summary of an indefinite sequence of measurement results in a finite amount of storage. The TCPA integrity measurement mechanism, together with the TPM DIRs, allows for the implementation of secure boot, where the TPM owner and TP owner can dictate the state into which a platform will boot. Chapter 12 describes how a platform's integrity measurements can be reported to a remote party as part of a process called integrity challenge.

Get Trusted Computing Platforms: TCPA Technology in Context now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.