INFINEON’S TPM Security Solution provides a comprehensive
hardware and software solution for safer computing targeted for today´s notebook and
desktop architectures.
As internet-based communication and commerce has rapidly developed in the past
few years, the need for enhanced platform-based system security has grown as well.
With the emergence of e-commerce and an increased reliance on the internet for all
forms of communication, businesses, and consumers alike are in greater need of
assurance that communication is trustworthy.
The Trusted Computing Group (TCG) was founded in 2003 and is continuing the efforts
of the Trusted Computing Platform Alliance (TCPA) to address these issues and to
allow for continued growth of the internet, computing- based communications and
commerce models. The TCG has more than 120 member companies and developed
both hardware and software security standards to address today’s need for strong
platform computing-based security and management.
The Trusted Computing Group (TCG) defi ned the latest version 1.2 of their standard
according to the requirements of the next generation operating system Microsoft
Windows Vista.
The Infi neon TPM 1.2 is based on the company’s proven 16-bit security controller
architecture, including non-volatile memory, hardware-based cryptographic
implementations of RSA (2048 bit keys) and Hash algorithms. A true Random Number
Generator required by the Trusted Computing Group specifi cation is embedded as well.
Infi neon security controllers based on this architecture have achieved the industry’s
highest rating for digital security, the Common Criteria EAL 5 high Certifi cate issued by
the German government agency responsible for security in information technology.
www.infineon.com/tpm
In addition to the secure controller,
Infi neon provides computer
manufacturers with a complete TCG
solution that includes all required
hardware, software, and management
utilities to develop a complete platform
security solution from one source.
Software application support for Single
Sign-On, E-Wallet, Secure
E-mail, Personal Secure Drive and
Digital Signature completes the Infi neon
package. In addition the TPM Software
Partner Program enables a broad range
of security applications to use the
benefi ts of the Infi neon TPM.
In conjunction with an on-going
commitment to providing security
solutions, Infi neon Technologies will
continue to provide complete solutions
that will guarantee the adoption of
tomorrow’s technologies today.
Trusted Computing
Product Brief
TPM 1.2
SLB 9635 TT 1.2
The Trusted Platform Module Solution
SECURITY
EMBEDDED TPM
Product Brief
How to reach us:
http://www.infi neon.com
Published by
Infi neon Technologies AG
81726 Munich, Germany
© Infi neon Technologies AG 2006.
All Rights Reserved.
Legal Disclaimer
The information given in this Product Brief shall in no event be
regarded as a guarantee of conditions or characteristics
(“Beschaffenheitsgarantie”). With respect to any examples or hints
given herein, any typical values stated herein and/or any informa-
tion regarding the application of the device, Infi neon Technologies
hereby disclaims any and all warranties and liabilities of any kind,
including without limitation warranties of non-infringement of
intellectual property rights of any third party.
Information
For further information on technology, delivery terms and
conditions and prices please contact your nearest
Infi neon Technologies Offi ce (www.infi neon.com).
Warnings
Due to technical requirements components may contain
dangerous substances. For information on the types in question
please contact your nearest Infi neon Technologies Offi ce.
Infi neon Technologies Components may only be used in life-
support devices or systems with the express written approval
of Infi neon Technologies, if a failure of such components can
reasonably be expected to cause the failure of that life-support
device or system, or to affect the safety or effectiveness of that
device or system.
Life support devices or systems are intended to be implanted in
the human body, or to support and/or maintain and sustain
and/or protect human life. If they fail, it is reasonable to assume
that the health of the user or other persons may be endangered.
Published by Infi neon Technologies AG
Hardware Features of the TPM 1.2
TCG 1.2 compliant trusted platform module (TPM)
Security architecture based on Infi neon SLE66CXxxPE security controller family
16-bit microcontroller in 0.22 µm CMOS technology
TCG 1.2 compliant embedded software
EEPROM for TCG fi rmware enhancements and for user data and keys
Advanced Crypto Engine (ACE) with RSA support up to 2048 bit key length
Hardware accelerator for SHA-1 hash algorithm
True Random Number Generator (TRNG)
Tick counter with tamper detection
Protection against Dictionary Attack
Infi neon’s TPM 1.2 will be certifi ed at Evaluation Assurance Level (EAL) 4 Medium at
TÜViT Labs in Germany
General Purpose Input/Output
Intel® Trusted Execution Technology Support
AMD® Secure Virtual Machine Architecture Support
Microsoft’s recommended GPIO included
Full personalization with Endorsement Key (EK) and EK certifi cate
Power saving sleep mode
3.3 V power supply
WHQL dual mode 1.1b + 1.2 TPM Windows Kernel Mode Driver
Operating temperature range: 0°C to +70°C
CPU
(e.g. Pentium, K6) North Bridge
(e.g. Intel, Via) South Bridge
(e.g. Intel, Via)
Main Memory
(SDRAM)
Current PC Platform
SuperIO
PCI
USB
IDE
AC97
SER
PS/2
FD
Par
TPM
as defined by Intel
LPC)
Low Pin
Count Bus
Motherboard Architecture using TPM
TCG Application
TPM Operating System
Trusted Platform Module Hardware
TSS-API DLL BIOS Boot Block
BIOS TPM Driver
TSS-API DLL
TSS-API
API Layer
Application
using
MS-CAPI
Application
using
PKCS#11
Desktop
Management
Software
TSS System Service
TPM Device Driver
Interfaces
Low Pin Count (LPC) interface to allow easy
system integration
Operates from a single 33 MHz clock
Support of power down signal to enter low-
power standby mode
Support of dynamic clock shutdown (CLKRUN)
Package
Small Low profi le TSSOP-28 package
Green package
Security Features
Over/Under voltage Detection
Low frequency sensor
High frequency fi lter
Reset fi lter
Memory Encryption (MED)
Additional security features
Software Features
Embedded secure operating system
Embedded TCG application
Reference implementation for
PC-BIOS integration
TPM Professional Package (supporting
Windows 2000, Windows XP Home,
Windows® XP Professional, Windows XP
Tablet, Windows 2000/2003 Server Windows
Vista, Linux driver)
- TSS software stack compliant to TCG
specifi cations
- TPM Cryptographic Service Provider (CSP)
- Infi neon’s desktop management
software for policy enforcement and
security feature management
Support of MS-CAPI and PKCS#11 Applications
Microsoft Outlook® and Outlook Express®
Microsoft Offi ce 2000, Offi ce XP
and Offi ce 2003
Microsoft Internet Explorer®
Netscape Communicator®
Microsoft Encrypted File System
RSA Secure ID®
Check PointTM SecuRemote/SecureClient
Check PointTM VPN-1®/FireWall-1 NG®
EntrustTM Desktop Manager Solutions
GemSafe for TPM /Smart Card
Ordering No. B116-H7956-G7-X-7600
Printed in Germany
PS 11061. nb
Note:
Microsoft Outlook, Outlook Express, Explorer and Windows are registered trademarks of Microsoft Corporation.
Netscape Communicator is a registered trademark of Netscape Communications Corporation.
RSA SecureID is registered trademarks of RSA Security Inc.
Check Point, the Check Point logo, OPSEC, VPN-1 SecureClient, and VPN-1 SecuRemote are trademarks
or registered trademarks of Check Point Software technologies Ltd. or its affi liates.
GemSafe for TPM is a registered tratemark of Gemalto.
®
S
E
C
P
O
C
h
e
c
k
P
o
i
n
t
C
E
R
T
I
F
I
E
D