ISO/IEC 11889-2:2009
Information technology — Trusted Platform Module — Part 2: Design principles
ISO/IEC 11889 defines the Trusted Platform Module (TPM), a device that enables trust in computing platforms in general. ISO/IEC 11889-2:2009 defines the principles of TPM operation. These include base operating modes, cryptographic algorithms and key sizes for the algorithms, basic interoperability requirements, basic protocols and the use of the protocols, and use of TPM resources.
| Get this standard | Prices exclude GST | |
|---|---|---|
| PDF ( Single user document) |
$5.00 NZD
|
|
| HardCopy |
$50.00 NZD
|
|
| Networkable PDF |
Price varies
|
Scope
Key words
Statement Type
Normative references
Abbreviated Terms
Conformance
Introduction
Threat
Protection of functions
Protection of information
Side effects
Exceptions and clarifications
TPM Architecture
Interoperability
Components
Input and Output
Cryptographic Co-Processor
RSA Engine
Signature Operations
Symmetric Encryption Engine
Using Keys
Key Generation
Asymmetric – RSA
Nonce Creation
HMAC Engine
Random Number Generator
Entropy Source and Collector
State Register
Mixing Function
RNG Reset
SHA-1 Engine
Power Detection
Opt-In
Execution Engine
Non-Volatile Memory
Data Integrity Register (DIR)
Platform Configuration Register (PCR)
Endorsement Key Creation
Controlling Access to PRIVEK
Controlling Access to PUBEK
Attestation Identity Keys
TPM Ownership
Platform Ownership and Root of Trust for Storage
Authentication and Authorization Data
Dictionary Attack Considerations
TPM Operation
TPM Initialization & Operation State Flow
Initialization
Self-Test Modes
Operational Self-Test
Startup
Operational Mode
Enabling a TPM
Activating a TPM
Taking TPM Ownership
Enabling Ownership
Transitioning Between Operational States
Clearing the TPM
Physical Presence
Root of Trust for Reporting (RTR)
Platform Identity
RTR to Platform Binding
Platform Identity and Privacy Considerations
Attestation Identity Keys
AIK Creation
AIK Storage
Root of Trust for Storage (RTS)
Loading and Unloading Blobs
Transport Sessions and Authorization Protocols
Authorization Session Setup
Parameter Declarations for OIAP and OSAP Examples
Object-Independent Authorization Protocol (OIAP)
Object-Specific Authorization Protocol (OSAP)
Authorization Session Handles
Authorization-Data Insertion Protocol (ADIP)
AuthData Change Protocol (ADCP)
Asymmetric Authorization Change Protocol (AACP)
ISO/IEC 19790 Evaluations
TPM Profile for successful ISO/IEC 19790 evaluation
Maintenance
Field Upgrade
Proof of Locality
Monotonic Counter
Transport Protection
Transport encryption and authorization
MGF1 parameters
HMAC calculation
Transport log creation
Additional Encryption Mechanisms
Transport Error Handling
Exclusive Transport Sessions
Transport Audit Handling
Auditing of wrapped commands
Audit Commands
Audit Monotonic Counter
Design Section on Time Stamping
Tick Components
Basic Tick Stamp
Associating a TCV with UTC
Additional Comments and Questions
Context Management
Eviction
Session pool
Initialization Operations
HMAC digest rules
Generic authorization session termination rules
PCR Grand Unification Theory
Validate Key for use
Non Volatile Storage
NV storage design principles
NV Storage use models
Use of NV storage during manufacturing
Delegation Model
Table Requirements
How this works
Family Table
Delegate Table
Delegation Administration Control
Control in Phase 1
Control in Phase 2
Control in Phase 3
Family Verification
Use of commands for different states of TPM
Delegation Authorization Values
Using the authorization value
DSAP description
Physical Presence
Use of Physical Presence
TPM Internal Asymmetric Encryption
TPM_ES_RSAESOAEP_SHA1_MGF1
TPM_ES_RSAESPKCSV15
TPM_ES_SYM_CTR
TPM_ES_SYM_OFB
TPM Internal Digital Signatures
TPM_SS_RSASSAPKCS1v15_SHA1
TPM_SS_RSASSAPKCS1v15_DER
TPM_SS_RSASSAPKCS1v15_INFO
Use of Signature Schemes
Key Usage Table
Direct Anonymous Attestation
TPM_DAA_JOIN
TPM_DAA_Sign
DAA Command summary
TPM setup
JOIN
SIGN
General Purpose IO
Redirection
Structure Versioning
Certified Migration Key Type
Certified Migration Requirements
Key Creation
Migrate CMK to a MA
Migrate CMK to a MSA
Revoke Trust
Mandatory and Optional Functional Blocks
1.1a and 1.2 Differences
Bibliography
Keep me up-to-date
Sign up to receive updates when there are changes to this standard
Related Information
Similar Standards
-
AS/NZS ISO/IEC 27001:2023
Information security, cybersecurity and privacy protection – Information security management systems – Requirements
-
AS/NZS ISO/IEC 27001:2023 A1
Information security, cybersecurity and privacy protection - Privacy enhancing data de-identification framework
-
AS/NZS ISO/IEC 27002:2022
Information security, cybersecurity and privacy protection — Information security controls
-
AS/NZS ISO/IEC 27036.2:2024
Cybersecurity - Supplier relationships, Part 2: Requirements
Scope
Key words
Statement Type
Normative references
Abbreviated Terms
Conformance
Introduction
Threat
Protection of functions
Protection of information
Side effects
Exceptions and clarifications
TPM Architecture
Interoperability
Components
Input and Output
Cryptographic Co-Processor
RSA Engine
Signature Operations
Symmetric Encryption Engine
Using Keys
Key Generation
Asymmetric – RSA
Nonce Creation
HMAC Engine
Random Number Generator
Entropy Source and Collector
State Register
Mixing Function
RNG Reset
SHA-1 Engine
Power Detection
Opt-In
Execution Engine
Non-Volatile Memory
Data Integrity Register (DIR)
Platform Configuration Register (PCR)
Endorsement Key Creation
Controlling Access to PRIVEK
Controlling Access to PUBEK
Attestation Identity Keys
TPM Ownership
Platform Ownership and Root of Trust for Storage
Authentication and Authorization Data
Dictionary Attack Considerations
TPM Operation
TPM Initialization & Operation State Flow
Initialization
Self-Test Modes
Operational Self-Test
Startup
Operational Mode
Enabling a TPM
Activating a TPM
Taking TPM Ownership
Enabling Ownership
Transitioning Between Operational States
Clearing the TPM
Physical Presence
Root of Trust for Reporting (RTR)
Platform Identity
RTR to Platform Binding
Platform Identity and Privacy Considerations
Attestation Identity Keys
AIK Creation
AIK Storage
Root of Trust for Storage (RTS)
Loading and Unloading Blobs
Transport Sessions and Authorization Protocols
Authorization Session Setup
Parameter Declarations for OIAP and OSAP Examples
Object-Independent Authorization Protocol (OIAP)
Object-Specific Authorization Protocol (OSAP)
Authorization Session Handles
Authorization-Data Insertion Protocol (ADIP)
AuthData Change Protocol (ADCP)
Asymmetric Authorization Change Protocol (AACP)
ISO/IEC 19790 Evaluations
TPM Profile for successful ISO/IEC 19790 evaluation
Maintenance
Field Upgrade
Proof of Locality
Monotonic Counter
Transport Protection
Transport encryption and authorization
MGF1 parameters
HMAC calculation
Transport log creation
Additional Encryption Mechanisms
Transport Error Handling
Exclusive Transport Sessions
Transport Audit Handling
Auditing of wrapped commands
Audit Commands
Audit Monotonic Counter
Design Section on Time Stamping
Tick Components
Basic Tick Stamp
Associating a TCV with UTC
Additional Comments and Questions
Context Management
Eviction
Session pool
Initialization Operations
HMAC digest rules
Generic authorization session termination rules
PCR Grand Unification Theory
Validate Key for use
Non Volatile Storage
NV storage design principles
NV Storage use models
Use of NV storage during manufacturing
Delegation Model
Table Requirements
How this works
Family Table
Delegate Table
Delegation Administration Control
Control in Phase 1
Control in Phase 2
Control in Phase 3
Family Verification
Use of commands for different states of TPM
Delegation Authorization Values
Using the authorization value
DSAP description
Physical Presence
Use of Physical Presence
TPM Internal Asymmetric Encryption
TPM_ES_RSAESOAEP_SHA1_MGF1
TPM_ES_RSAESPKCSV15
TPM_ES_SYM_CTR
TPM_ES_SYM_OFB
TPM Internal Digital Signatures
TPM_SS_RSASSAPKCS1v15_SHA1
TPM_SS_RSASSAPKCS1v15_DER
TPM_SS_RSASSAPKCS1v15_INFO
Use of Signature Schemes
Key Usage Table
Direct Anonymous Attestation
TPM_DAA_JOIN
TPM_DAA_Sign
DAA Command summary
TPM setup
JOIN
SIGN
General Purpose IO
Redirection
Structure Versioning
Certified Migration Key Type
Certified Migration Requirements
Key Creation
Migrate CMK to a MA
Migrate CMK to a MSA
Revoke Trust
Mandatory and Optional Functional Blocks
1.1a and 1.2 Differences
Bibliography