TPM Endorsement Key Certificates Need a Real Trust Chain

<h1> TPM Endorsement Key Certificates Need a Real Trust Chain </h1> <p>A TPM endorsement key is often described as a device identity. That description is incomplete. The private key is designed never to leave the TPM, but a verifier must still establish that the public key belongs to a genuine TPM and that the certificate chain reaches a manufacturer trust anchor it recognizes. A certificate reque

Read the source →