TPM (Trusted Platform Module) is an integrated chip on the motherboard that stores keys, passwords and digital certificates. It is specifically designed to enhance platform security above-and-beyond the capabilities of today’s software by providing a protected space for key operations and other security critical tasks. The information stored is typically much more resistant to attacks; both software and theft. TPM protects encryption and signature keys at their most vulnerable stages i.e operations when the keys are being used unencrypted in plain-text form. Access to data could be denied if the boot sequence is not as expected making email, secure web access and data protection much more secure.
Systems with TPMs offer improved, hardware -based security in numerous applications, such as file and folder encryption, local password management, S-MIME e-mail, VPN and PKI authentication and wireless authentication for 802.1x.
They are complementary to the TPM , which is considered a fixed token that can be used to enhance user authentication, data, communications, and/or platform security. A smart card is a portable token traditionally used to provide more secure authentication for a specific user across multiple systems, while biometrics are providing that functionality in an increasing number of systems. Both technologies can have a role in the design of more secure computing environments.
No. There is no ability to do this. The subsystem can only act as a 'slave' to higher level services and applications by storing and reporting pre-runtime configuration information. Other applications determine what is done with this information.
Microsoft BitLocker™ Drive Encryption is designed to make use of a Trusted Platform Module (TPM ) 1.2 to protect critical system files and user data and to help ensure that a computer running Windows Vista has not been tampered with while the system was offline.
For BitLocker™ to make use of a TPM , it must be a version 1.2. While it is possible to use BitLocker™ without a TPM by storing the keying material on a USB flash drive, this is not the preferred customer configuration, nor is it expected to be typical usage due to the cost and manageability challenges associated with this mode of use.