TRUSTED COMPUTING GROUP (TCG) TIMELINE
February 20112003
Trusted Computing Group is announced with membership of 14 companies, including Promoters and board members
AMD, Hewlett-Packard, IBM, Intel Corporation, Microsoft, Sony Corporation and Sun Microsystems, Inc. TCG
structure and vision are created to enable extension of trusted computing beyond the PC into the enterprise. TCG
adopts existing specifications for the Trusted Platform Module (TPM) security chip for clients and publishes as anopen industry specification.
2004
TCG announces the Trusted Platform Module (TPM) specification 1.2. Manufacturers begin shipping a variety ofenterprise desktop and notebook PCs equipped with TPMs and software to enable applications including data and file
encryption, secure email, single sign-on, storage of certificates and passwords and other applications.
Members begin participating in work groups to address security in mobile devices, storage, servers, peripherals andinfrastructure requirements.
TCG also announces the Trusted Network Connect (TNC) subgroup to work on an open specification for network
access control and endpoint integrity and the addition of almost 30 new members to focus on the effort. Group starts
to define requirements and use cases for an open specification.
Membership expands to 98 companies by end of the year, with participation broadening beyond semiconductor andclient companies to software developers, networking and storage companies.
The group initiates an advisory council of leading IT, privacy, finance and security industry experts.
The group also begins a liaison program with other industry standards groups and begins a mentoring program forthose researchers and academic institutions doing research on trusted computing and related topics.
2005
The group expands its board of directors. Two companies, VeriSign and Seagate Technology, are elected by themembership to the board. Infineon, an early developer and adopter of the TPM, is added to the board as a Promotermember.
TPM adoption continues to grow, as chipmakers offer discrete and integrated versions for desktop and notebook
systems, as well as for servers. Analysts predict shipments to top some 250 million by 2010.
The group’s Mobile Phone Work Group releases use cases to define how the concepts of trusted computing could beapplied in mobile phones. Work group participation expands to include key vendors in handsets, chips andapplications.
Hoping to offset the rapid increase in data loss, theft and unauthorized access, the Storage Work Group begins workon an open industry specification for data “at rest” in a variety of mediums, including hard drives, tape and flash
memory. The group releases its use cases for industry review and begins working with existing storage specificationgroups to ensure command support is created for widely used SCSI and ATA architectures.
The server work group makes its specification for using the TPM in servers available. Vendors begin development ofservers that will help ensure a trusted client is connecting to the intended server. The specification also provides for ausage model in which the server is verified to meet minimum standards before being allowed to perform sensitivetransactions.
TNC participation swells to some 60 member participants. TCG delivers the TNC architecture and a series of open
specifications for developing products to support it. Several demos are shown to demonstrate some key concepts ofTNC at Interop Las Vegas. First products, including switches and other products, are announced as supporting TNC.
Microsoft pledges interoperability of its Network Access Protection architecture with TNC.

Copyright ©2003-2011 Trusted Computing Group (www.trustedcomputinggroup.org.) All Rights Reserved

2006
Shipments of TPMs for systems are predicted to top some 20 million and virtually every enterprise system shippedfrom the top 20 vendors contains one of the security chips. The first servers enabled with TPMs begin shipping.
Infineon and Lenovo join TCG’s board of directors as promoter companies. Wave Systems and Seagate Technology
are elected to the board by the membership of some 140 member companies.
TNC adds specifications to the architecture. A more robust demonstration incorporating integrity measurement andverification and other key TNC functions is shown. The first deployment, a telemedicine application, is announced.
The Internet Protocol Equipment Certification
organization of Japan endorses TNC for network security. Ten more industry companies, including those inremediation and other areas, join TCG to support TNC. Products for wireless LANs, integrity measurement andverification, network access, server communication and other functions are announced. Independent demonstrations
by the Interop iLabs team include open source Radius server and 802.1x supplicant elements, combined with otherproducts and software.
TCG’s Mobile Phone Work Group announces its Mobile Trusted Module (MTM) specification for enabling trust andsecurity in mobile phones. Industry analysts, as well as the mobile standards organizations creating complementaryspecifications, praise the TCG’s efforts to provide non-proprietary solutions to the issues of mobile data, transactions
and content.
2007
In first quarter, TCG announces revised specifications for TNC that add support for Java and VoIP endpoints.
TCG announces a number of new members and hosts its first hands-on workshop at RSA 2007.
In May 2007, at Interop Las Vegas 2007, TCG announces interoperability of the TNC architecture with Microsoft’s
Network Access Protection (NAP) architecture, enabling products based on TNC specifications to work with Windows
clients and servers and vice versa. This interoperability, previously promised by Microsoft and TCG, opens up a
number of NAC deployment options for customers, preserves investments and reduces confusion in the NAC marketfor both customers and vendors.
June 2007, the group announces its Trusted Storage specification that enables full security of local drives on PCs.
The group will work to extend this trusted storage to other storage devices. Later this year, the work group announces
its first application note for key management and a new subgroup dedicated to trusted optical drive devices.
TCG’s mobile work group makes available its Mobile Reference Architecture specification mid-year. This is the first
open, hardware-assisted security standard for mobile trusted platforms that will use the Mobile Trusted Module(MTM) based on a specification published in September 2006.
2008
In January, FreeRADIUS, on open source Radius server implementation, announces a new release that adds supportfor TNC. It joins a number of other open source implementations and products for TNC.
Also in the first quarter, as part of its ongoing commitment to the IETF and that group’s Network EndpointAssessment (NEA) working group, TCG submits the IF-TNCCS (TNC client-server) 2.0, IF-M (measurement) 1.0 and
IF-M Security specifications to the IETF. The IETF NEA working group decides to adopt these specifications as thebasis for developing a set of IETF RFCs.
In April 2008, the TNC work group announces a major extension to the TNC architecture. Moving beyond preadmission control, the architecture now can support post-admission control via its new IF-MAP (Interface Metadata
Access Point) protocol.
The new protocol provides a powerful publish/subscribe model that allows data from a variety of networking andsecurity devices and applications to be collected and communicated throughout the network. During this time, newmembers Arcsight, nSolutions, Lumeta and others join TCG to work on this effort. Demos are shown at Interop 2008
alongside demos of existing TNC capabilities including the NAP/TNC statement of health and others
The organization announces the Japan Regional Forum in June 2008 to help promote and foster development ofproducts and services based on TCG specifications.

Copyright ©2003-2011 Trusted Computing Group (www.trustedcomputinggroup.org.) All Rights Reserved

In the fall of 2008, the organization announces a deep set of development tools and resources from member
companies to help foster development of applications for the TPM.
2009
TCG’s Storage Work Group releases final specifications for self-encrypting drives for laptops and data centers and aset of APIs to enable interoperability among vendors who design the drives.
In April 2009, the organization rolls out its first certification program, targeted to TPMs. The program provides aminimum level of required security and helps ensure interoperability and adherence to the TCG specifications. It isannounced that the next certification program will be for products using the Trusted Network Connect network
security specifications.
TNC announces a focus on “Pervasive Security” with new support for remote access, clientless endpoints andfederated ID; a variety of TNC implementations and capabilities are shown at Interop 2009.
The Japan Regional Forum hosts a permanent demonstration showcase in Tokyo.
TPM is recognized as an international standard by ISO. In other international developments, TCG forms a second
regional body, the China Regional Forum, for communication and education of the developer and end-usercommunities.
2010
In January at Storage Visions, TCG members show the first self-encrypting drives based on TCG specifications.
TCG hosts the “Security Playground” at RSA Conference 2010, giving some 500 attendees hands-on interaction with
the TPM, self-encrypting drives and network security based on the TNC specifications.
In March, the Internet Engineering Task Force (IETF) publishes long-awaited network access control standards
based on TCG’s TNC specifications. In doing so, all products supporting TNC and Microsoft’s Network AccessProtocol become compatible with products supporting Cisco’s flavor of network access control. This basically ends
the NAC standards war.
A certification program for TNC is announced with the first set of certified products from several TCG members.
Members show a variety of demonstrations of TNC including those incorporating the Metadata Access Protocol (IFMAP); demonstrations include integration of physical and IT security and SCADA security.
The U.S. National Security Agency hosts the first Trusted Computing Conference and Expo. Speakers from U.S.
Government agencies, leading vendors and enterprises address challenges in cyber security. Applications of Trusted
Computing, including the Trusted Platform Module, self-encrypting drives and network security, are discussed for thefirst time by large enterprise users. Hundreds of attendees also see Trusted Computing demonstrations.
TCG announces the Trusted Multi-Tenant Infrastructure Work Group, which will address the role of trust in cloudsecurity.
TNC continues its evolution, announcing updates to the TNC IF-MAP specification and integration of TNC with theSCAP protocol. As a result of the latter, SCAP-validated scanners can now be used with TNC-certified network
security gear to identify and quarantine unhealthy devices.
TCG participates in an event hosted by India’s national IT and security organization to continue its worldwideoutreach.
Estimates of TPMs embedded in various systems approach one billion. The large enterprise
PriceWaterhouseCoopers notes its use of the TPM to protect sensitive data.

Contact:

Anne Price, PR Works, Inc.
+1-602-840-6495
press@trustedcomputinggroup.org

Copyright ©2003-2011 Trusted Computing Group (www.trustedcomputinggroup.org.) All Rights Reserved