Trusted Computing Platforms: TCPA Technology in Context

Chapter 7. Protected Storage

This chapter introduces the TCPA security feature of confidential data storage. Protected Storage is a service to the host platform in which the TPM acts as a portal to confidential data stored on arbitrary, unprotected storage media. The service creates and uses TPM protected objects held outside the TPM. These objects can consist of either arbitrary data protected by the TPM (TPM protected data objects) or TPM keys protected by the TPM (TPM protected key objects). This Protected Storage service requires the support of host platform software to manage those objects. That management process is not security sensitive and consequently is ignored by the TCPA specification. This chapter, which concentrates on the actions ...