scope:

This is an informative background document and contains no specifications or
20 normative information. To find normative information and specifications about the TPM,
21 refer to the TPM Main Specification, parts 1-3.
22 A Trusted Platform Module (TPM) is an implementation of a defined set of capabilities that is
23 intended to provide authentication and attestation functionality for a computing device,
24 and protect information by controlling access to plain-text data.
25 A TPM is self-sufficient as a source of authentication and as a means of enhancing the
26 protection of information from certain physical attacks. A TPM requires the cooperation
27 of a TCG "Trusted Building Block" (outside the TPM, that is also part of the computing
28 device) in order to provide attestation and protect information from software attacks on
29 the computing device.
30 Typical TPM implementations are affixed to the motherboard of a computing device.
31 A computing device that contains both a TPM and a Trusted Building Block is a called a
32 Trusted Platform. Trusted Platforms offer improved, hardware-based security in
33 numerous applications, such as file and folder encryption, local password management,
34 S-MIME e-mail, VPN and PKI authentication and wireless authentication for 802.1x and
35 LEAP.