ERRATA

Errata for TCG Reference Integrity Manifest (RIM) Information
Model Version 1.01 Revision 0.16

Version 1Revision 4
November 12, 2020

Contact: admin@trustedcomputinggroup.org

PUBLISHED

Errata for TCG Reference Integrity Manifest (RIM) Information Model | Version 1 | Revision 4 | 11/12/2020 | PUBLISHED | © TCG 2020

Errata for TCG Reference Integrity Manifest (RIM) Information ModelDISCLAIMERS, NOTICES, AND LICENSE TERMS
THIS ERRATA IS PROVIDED “AS IS” WITH NO WARRANTIES WHATSOEVER, INCLUDING ANY WARRANTY OF
MERCHANTABILITY, NONINFRINGEMENT, FITNESS FOR ANY PARTICULAR PURPOSE, OR ANY WARRANTYOTHERWISE ARISING OUT OF ANY PROPOSAL, SPECIFICATION OR SAMPLE.
Without limitation, TCG disclaims all liability, including liability for infringement of any proprietary rights, relating to useof information in this specification and to the implementation of this specification, and TCG disclaims all liability forcost of procurement of substitute goods or services, lost profits, loss of use, loss of data or any incidental,
consequential, direct, indirect, or special damages, whether under contract, tort, warranty or otherwise, arising in any
way out of use or reliance upon this specification or any information herein.
This document is copyrighted by Trusted Computing Group (TCG), and no license, express or implied, is granted
herein other than as follows: You may not copy or reproduce the document or distribute it to others without written
permission from TCG, except that you may freely do so for the purposes of (a) examining or implementing TCG
specifications or (b) developing, testing, or promoting information technology standards and best practices, so longas you distribute the document with these disclaimers, notices, and license terms.
Contact the Trusted Computing Group at www.trustedcomputinggroup.org for information on specification licensing
through membership agreements.
Any marks and brands contained herein are the property of their respective owners.

Errata for TCG Reference Integrity Manifest (RIM) Information Model | Version 1 | Revision 4 | 11/12/2020 | PUBLISHED | Page 1 | © TCG 2020

Errata for TCG Reference Integrity Manifest (RIM) Information Model

CHANGE HISTORYREVISIONDATEDESCRIPTION

1.00/1.00

July 22, 2020•

Initial Release of Version 1.00.

1.00/1.01

August 18, 2020•

Added use of camel case for table 1 attributes

1.00/1.02

September 4, 2020•

Added informative note for Appendix A

1.00/1.03

October 9, 2020•

Removed Clarification section and folded description information into errata

1.00/1.04

November 2, 2020•

Minor Grammar fixes

Errata for TCG Reference Integrity Manifest (RIM) Information Model | Version 1 | Revision 4 | 11/12/2020 | PUBLISHED | Page 2 | © TCG 2020

Errata for TCG Reference Integrity Manifest (RIM) Information Model

CONTENTSDISCLAIMERS, NOTICES, AND LICENSE TERMS ................................................................................................... 1
CHANGE HISTORY .................................................................................................................................................... 2
1Introduction .......................................................................................................................................................... 4

2Errata ................................................................................................................................................................... 5
2.1 Table 1 ........................................................................................................................................................ 5
2.2 versionScheme ............................................................................................................................................ 5
2.3 corpus default value ..................................................................................................................................... 5
2.4 patch default value ....................................................................................................................................... 6
2.5 supplemental default value .......................................................................................................................... 6
2.1 rimLinkHash ................................................................................................................................................. 6
2.2 Payload attribute notes ................................................................................................................................ 6
2.3 Payload name .............................................................................................................................................. 6
2.4 Payload size ................................................................................................................................................. 6
2.5 Payload hash ............................................................................................................................................... 6
2.6 hashAlgorithm .............................................................................................................................................. 6
2.7 digest ........................................................................................................................................................... 6
2.8 RIM Binding Specification Guidelines .......................................................................................................... 6

Errata for TCG Reference Integrity Manifest (RIM) Information Model | Version 1 | Revision 4 | 11/12/2020 | PUBLISHED | Page 3 | © TCG 2020

Errata for TCG Reference Integrity Manifest (RIM) Information Model

1 Introduction
This document describes errata and clarifications for the TCG Reference Integrity Manifest Information Model v1.0 aspublished. The information in this document is likely – but not certain – to be incorporated into a future version of thespecification. Suggested fixes proposed in this document may be modified before being published in a later TCGSpecification. Therefore, the contents of this document are not normative and only become normative when included
in an updated version of the published specification. Note that since the errata in this document are non-normative,
the patent licensing rights granted by Section 16.4 of the Bylaws do not apply.

.
.

.
.

Errata for TCG Reference Integrity Manifest (RIM) Information Model | Version 1 | Revision 4 | 11/12/2020 | PUBLISHED | Page 4 | © TCG 2020

Errata for TCG Reference Integrity Manifest (RIM) Information Model2 Errata
2.1 Table 1
ISO 19770-2 adopts a convention of Pascal-case (ThisIsAnExample) for Elements and sub-Elements and camelcase (thisIsAnExample) for attributes. Table 1 is inconsistent with that convention. Attribute names should becamelCase.
Camel-case corrections for Table 1:

Element Name

Old attribute spelling

Corrected attribute spelling

SoftwareIdentity

Name

name

Entity

Name

name

Regid

regid

Rolerole

Link

Href

href

Meta

PayloadType

payloadType

PlatformManufacturerStr

platformManufacturerStr

PlatformManufacturerId

platformManufacturerId

PlatformModel

platformModel

PlatformVersion

platformVersion

FirmwareManufacturerStr

firmwareManufacturerStr

FirmwareManufacturerIdfirmwareManufacturerId

FirmwareModel

firmwareModel

FirmwareVersion

firmwareVersion

BindingSpec

bindingSpec

BindingSpecVersion

bindingSpecVersion

RIMLinkHash

rimLinkHash

NamenameSizesize

Hash

hash

Payload2.2

versionScheme

versionScheme is defined by NISTIR8060 and should be included as an optional attribute of the SoftwareIdentity
element in Table 1. The notes column entry in Table 1 for this attribute should be:
As described in NISTIR 8060 section 5.1.2

2.3

corpus default value

The corpus attribute in the SoftwareEntity element as described in Table 1 is optional. If it is not present, theattribute should be considered false.
Errata for TCG Reference Integrity Manifest (RIM) Information Model | Version 1 | Revision 4 | 11/12/2020 | PUBLISHED | Page 5 | © TCG 2020

Errata for TCG Reference Integrity Manifest (RIM) Information Model

The SoftwareIdentity element corpus attribute Notes column in Table 1 should append the following sentence:
The default value is false.

2.4

patch default value

The patch attribute within the SoftwareEntity element as described in Table 1 is optional. If it is not present it theattribute should be considered false.
The SoftwareIdentity element patch attribute Notes column in Table 1 should append the following sentence:
The default value is false.

2.5

supplemental default value

The supplemental attribute within the SoftwareEntity Element as described in Table 1 is optional. If thesupplemental attribute is not present it the attribute should be considered false.
The SoftwareIdentity element supplemental attribute Notes column in Table 1 should append the following
sentence:
The default value is false.

2.1 rimLinkHash
The Meta element’s rimLinkHash in Table 1 is required, yet section 4.1.6 states the rimLinkHash is not required forPrimary Base RIM. The RIMLinkHash is also defined in section 4.1.6 as the hash of the RIM referenced by the Linkelement. The rimLinkHash should be listed as optional in Table 1.

2.2

Payload attribute notes

The Payload element Notes column entry in Table 1 pertaining to the payload element’s File, Directory, Process,and/or Resource attribute should be:“see section 4.1.2 . “

2.3

Payload name

The Payload element’s name attribute in Table 1 should be listed as optional and the note should be:“MUST be present for File, Directory, and Process. MUST contain the name of the measurement target if
PayloadType=”Direct” or Support RIM if PayloadType=”Indirect”.”

2.4

Payload size

The Payload element’s size attribute in Table 1 should be optional and the note should be:“MUST be present for File and Directory. Should contain the size (in bytes) of the reference.”2.5

Payload hash

The Payload element’s hash attribute note in Table 1 should be:
MUST contain a Hash that holds the digest of the reference.

2.6

hashAlgorithm

The Signature element’s hashAlgorithm attribute in Table 1 should be optional.

2.7

digestThe Signature element’s digest attribute in Table 1 should be optional.

2.8 RIM Binding Specification Guidelines
Appendix A should read as informative:

Errata for TCG Reference Integrity Manifest (RIM) Information Model | Version 1 | Revision 4 | 11/12/2020 | PUBLISHED | Page 6 | © TCG 2020

Errata for TCG Reference Integrity Manifest (RIM) Information Model

Start of informative comment
In addition to the requirements detailed in this specification the Binding Specification should address the following
requirements:
1. The Base RIM should be digitally signed using a TCG listed digital signing algorithm [16].
2. The binding specification should format the signature field of the Base RIM and define how signatures are to beapplied.
3. The binding specification should define the value used for the BindingSpec attribute within the Meta field.
4. The Base and Supplemental RIMs should be formatted using XML (as described by NISTIR 8060) or CBOR (asdescribed by the IEFT CoSWID specification [12]).
5. The Base RIM should hold a payload element for every support RIM Bundle specified in the Binding specification.
6. Delivery of the initial RIM Bundle to the Verifier should be addressed by the Binding specification. Delivery may
include placement on the platform during manufacturing or a URI based retrieval mechanism. The LINK element inthe Base RIM provides information about the location of updates and should be included a RIM Bundle.
7. The RIM Binding specification should define how the Certificate Path used for the Validation of the RIM Bundle isto be obtained by a Verifier.
8. The binding specification should specify the use of a Platform Certificate and populate thePlatformConfigurationURI attribute.
End of informative commentErrata for TCG Reference Integrity Manifest (RIM) Information Model | Version 1 | Revision 4 | 11/12/2020 | PUBLISHED | Page 7 | © TCG 2020