What is Trusted Platform Module (TPM)?

Understanding Trusted Platform Module (TPM)

A specialized chip on a computer system's motherboard that stores encryption keys specific to the host system for hardware authentication. TPM is a hardware-based security component that provides secure cryptographic functions including secure key storage, secure boot measurements, cryptographic operations, and attestation capabilities. TPMs create a hardware root of trust, ensuring that cryptographic operations occur in a protected environment isolated from software vulnerabilities. TPM specifications are defined by the Trusted Computing Group and referenced in standards like NIST SP 800-147. Organizations implement TPM-based security through secure boot, disk encryption, credential protection, platform attestation, and hardware-based key management. For example, a government agency might require TPM chips in all laptops, enabling BitLocker full-disk encryption with keys protected by the TPM, verifying platform integrity through measured boot, ensuring credentials cannot be extracted even if the operating system is compromised, and providing hardware-based random number generation for strong cryptographic operations. Related terms: Hardware security, Root of trust, Secure boot, Full disk encryption, BitLocker, Platform attestation, Measured boot, Trusted computing, Cryptographic module.