3.4 TPM and HSM

Question 1

Hardware RoT (Root of Trust)

Answer 1

is the foundation of all secure operations of a computer ssytem

Question 2

Hardware Root of Trust (RoT)

Answer 2

Cryptographic module embedded in a computer system that endorses trusted execution and attests to boot settings and metrics. It’s used to scan the boot metrics in the OS files to verify signatures and then use them to sign the report

Question 3

Trusted Platform Module (TPM)

Answer 3

Specification for hardware-based storage of digital certificates, keys, hashed passwords, and other user and platform identification information. TPM is a hardware RoT. TPM provides encryption for storage devices.

Question 4

Hardware Security Module (HSM)

Answer 4

Appliance for generating and storing cryptographic keys that is less susceptible to tampering and insider threats. They are automated and cannot be compromised by human involvement