TCG Platform Certificate Profile
Specification Version 1.1
Revision 19
10 April 2020
Published

Contact: admin@trustedcomputinggroup.org

TCG PUBLISHED
Copyright © TCG 2020

TCG

Copyright © TCG 2020

TCG Platform Certificate Profile
Specification Version 1.1

Disclaimers, Notices, and License Terms
THIS SPECIFICATION IS PROVIDED "AS IS" WITH NO WARRANTIES WHATSOEVER,
INCLUDING ANY WARRANTY OF MERCHANTABILITY, NONINFRINGEMENT, FITNESS FOR
ANY PARTICULAR PURPOSE, OR ANY WARRANTY OTHERWISE ARISING OUT OF ANYPROPOSAL, SPECIFICATION OR SAMPLE.
Without limitation, TCG disclaims all liability, including liability for infringement of any
proprietary rights, relating to use of information in this specification and to theimplementation of this specification, and TCG disclaims all liability for cost of procurementof substitute goods or services, lost profits, loss of use, loss of data or any incidental,
consequential, direct, indirect, or special damages, whether under contract, tort, warranty orotherwise, arising in any way out of use or reliance upon this specification or any information
herein.
This document is copyrighted by Trusted Computing Group (TCG), and no license, express
or implied, is granted herein other than as follows: You may not copy or reproduce thedocument or distribute it to others without written permission from TCG, except that you
may freely do so for the purposes of (a) examining or implementing TCG specifications or (b)developing, testing, or promoting information technology standards and best practices, solong as you distribute the document with these disclaimers, notices, and license terms.
Contact the Trusted Computing Group at www.trustedcomputinggroup.org for information
on specification licensing through membership agreements.
Any marks and brands contained herein are the property of their respective owners.

Revision 19ii
TCG PUBLISHED

10 April 2020

Acknowledgement
The TCG wishes to thank those who contributed to this specification. This document builds
on considerable work done in the various working groups in the TCG.
Special thanks to the members of the IWG group and others contributing to this document:
Name
Carolin Baumgartner (IWG co-chair)
Dean Liberty
Randy Mummert
Malcolm Duncan
Bill Jacobs
Max Pritikin
Amy Nelson
Kazuaki Nimura
Monty Wiseman (IWG co-chair)
Graeme Proudler
Takeuchi Keisuke
Hisanori Mishima
Tom Laffey
Diana Arroyo
Lee Terrell
Roger Zimmermann
Ken Goldman
Markus Gueller
Johann Schoetz
Arkadiusz Berent
Eduardo Cabre
Geoffrey Strongin
Ned SmithDavid ChallenerDaniel Wong
Mark Williams
Mark Redman
Sue Roddy
Laszlo Elteto
Manuel Offenberg
Brad Andersen
Nicholas Szeto
Wyllys Ingersoll
Jeff Nisewanger
Paul Sangster
Andrew Medak
Lawrence Reinert
Thomas Hardjono
Greg Kazmierczak
Len Veil
Mihran Dars

Member Company
Carolin Baumgartner
AMD
Atmel
CESG
Cisco
Cisco
Dell
FujitsuGE
Graeme Proudler
Hitachi
Hitachi
HPE
IBM
IBM
IBM
IBM
Infineon
Infineon
Intel
Intel
Intel
Intel
John Hopkins University
Microsoft
Microsoft
Motorola
NSA
SafeNetSeagate Technology
SignaCertSony
Sun Microsystems
Sun Microsystems
Symantec Corporation
United States Government
United States Government
Wave Systems
Wave Systems
Wave Systems
Wave Systems

Copyright © TCG 2020

TCG Platform Certificate Profile
Specification Version 1.1

Table of Contents
1. Introduction ....................................................................................................................................................... 1
1.1

Purpose ................................................................................................................................................. 1

1.2

Document Scope ................................................................................................................................... 1

1.3

Relationship to Other TCG Specifications ............................................................................................ 1

1.4

Keywords ............................................................................................................................................... 2

1.5

Intended Audiences .............................................................................................................................. 2

1.6

Definition of Terms ................................................................................................................................ 2

2. Certificate Overview .......................................................................................................................................... 3
2.1

Platform Certificate ................................................................................................................................ 3

2.1.1

Who Uses a Platform Certificate? .................................................................................................. 3

2.1.2

Who Issues a Platform Certificate?................................................................................................ 3

2.1.3

Revocation of a Platform Certificate .............................................................................................. 4

2.1.4

Validity Period of a Platform Certificate ......................................................................................... 4

2.1.5

Assertions Made by a Platform Certificate ..................................................................................... 4

2.1.5.1

Certificate Type Label ................................................................................................................... 5

2.1.5.2

EK Certificates .............................................................................................................................. 5

2.1.5.3

Platform Manufacturer String ........................................................................................................ 5

2.1.5.4

Platform Manufacturer Identifier .................................................................................................... 5

2.1.5.5

Platform Model .............................................................................................................................. 6

2.1.5.6

Platform Version............................................................................................................................ 6

2.1.5.7

Issuer ............................................................................................................................................ 6

2.1.5.8

Platform Specification ................................................................................................................... 6

2.1.5.9

Certificate Specification ................................................................................................................ 6

2.1.5.10 Validity Period ............................................................................................................................... 6
2.1.5.11 Signature Value............................................................................................................................. 6
2.1.5.12 Platform Serial Number ................................................................................................................. 6
2.1.5.13 Platform Assertions ....................................................................................................................... 6
2.1.5.14 Platform Configuration .................................................................................................................. 7
2.1.5.15 Platform Configuration Uri ............................................................................................................. 7
2.1.5.16 Policy Reference ........................................................................................................................... 7
2.1.5.17 Revocation Locator ....................................................................................................................... 7
2.2

Delta Platform Certificate ...................................................................................................................... 7

2.2.1

Who Uses a Delta Platform Certificate? ........................................................................................ 8

2.2.2

Who Issues a Delta Platform Certificate? ...................................................................................... 8

2.2.3

Conditions for Issuing a Delta Platform Certificate ........................................................................ 8

Revision 19iv
TCG PUBLISHED

10 April 2020

2.2.4

Requirements for Issuing a Delta Platform Certificate ................................................................... 8

2.2.5

Revocation of a Delta Platform Certificate ..................................................................................... 9

2.2.6

Assertions Made by a Delta Platform Certificate ........................................................................... 9

2.2.6.1

Certificate Type Label ................................................................................................................. 10

2.2.6.2

EK Certificates ............................................................................................................................ 10

2.2.6.3

Base Platform Certificate ............................................................................................................ 10

2.2.6.4

Platform Manufacturer String ...................................................................................................... 10

2.2.6.5

Platform Manufacturer Identifier .................................................................................................. 11

2.2.6.6

Platform Model ............................................................................................................................ 11

2.2.6.7

Platform Version.......................................................................................................................... 11

2.2.6.8

Issuer .......................................................................................................................................... 11

2.2.6.9

Certificate Specification .............................................................................................................. 11

2.2.6.10 Validity Period ............................................................................................................................. 11
2.2.6.11 Signature Value........................................................................................................................... 11
2.2.6.12 Platform Serial Number ............................................................................................................... 11
2.2.6.13 Platform Configuration ................................................................................................................ 122.2.6.14 Platform Configuration Uri ........................................................................................................... 122.2.6.15 Policy Reference ......................................................................................................................... 122.2.6.16 Revocation Locator ..................................................................................................................... 12
3. X.509 ASN.1 Definitions ................................................................................................................................. 13
3.1

TCG Attributes ..................................................................................................................................... 13

3.1.1

TPM and Platform Assertions ...................................................................................................... 13

3.1.2

Name Attributes ........................................................................................................................... 15

3.1.3

TCG Specification Attributes ........................................................................................................ 15

3.1.4

TCG Certificate Type Attributes ................................................................................................... 16

3.1.5

TCG Certificate Specification Attributes ...................................................................................... 16

3.1.6

Platform Configuration Attributes ................................................................................................. 16

3.1.7

Platform Configuration Uri Attribute ............................................................................................. 19

3.2

Platform Certificate .............................................................................................................................. 19

3.2.1

Version ......................................................................................................................................... 21

3.2.2

Serial Number .............................................................................................................................. 22

3.2.3

Signature Algorithm ..................................................................................................................... 22

3.2.4

Holder ........................................................................................................................................... 22

3.2.5

Issuer ........................................................................................................................................... 22

3.2.6

Validity .......................................................................................................................................... 22

3.2.7

Certificate Policies........................................................................................................................ 22

3.2.8

Subject Alternative Names ........................................................................................................... 23

Copyright © TCG 2020

TCG Platform Certificate Profile
Specification Version 1.1

3.2.9

Targeting Information ................................................................................................................... 23

3.2.10Attributes ...................................................................................................................................... 23

3.2.11

Authority Key Identifier ................................................................................................................. 24

3.2.12

Authority Info Access ................................................................................................................... 24

3.2.13

CRL Distribution ........................................................................................................................... 24

3.2.14

Issuer Unique Id ........................................................................................................................... 24

3.3

Delta Platform Certificate .................................................................................................................... 24

3.3.1

Version ......................................................................................................................................... 26

3.3.2

Serial Number .............................................................................................................................. 26

3.3.3

Signature Algorithm ..................................................................................................................... 26

3.3.4

Holder ........................................................................................................................................... 26

3.3.5

Issuer ........................................................................................................................................... 27

3.3.6

Validity .......................................................................................................................................... 27

3.3.7

Certificate Policies........................................................................................................................ 27

3.3.8

Subject Alternative Names ........................................................................................................... 27

3.3.9

Targeting Information ................................................................................................................... 27

3.3.10Attributes ...................................................................................................................................... 27

3.3.11

Authority Key Identifier ................................................................................................................. 28

3.3.12

Authority Info Access ................................................................................................................... 28

3.3.13

CRL Distribution ........................................................................................................................... 28

3.3.14

Issuer Unique Id ........................................................................................................................... 28

4. X.509 ASN.1 Structures and OIDs ................................................................................................................. 29
5. References ...................................................................................................................................................... 34
A. Certificate Examples ....................................................................................................................................... 36
Example 1 (Platform Certificate in Attribute Certificate Format) ......................................................... 36
A.1.1

PEM Format ................................................................................................................................. 36

A.1.2

DER Format ................................................................................................................................. 37
Example 2 (Delta Platform Certificate in Attribute Certificate Format) ................................................ 43

A.2.1

PEM Format ................................................................................................................................. 43

A.2.2

DER Format ................................................................................................................................. 45

Revision 19vi
TCG PUBLISHED

10 April 2020

Table of Tables
Table 1: Platform Certificate Fields ......................................................................................................................... 5
Table 2: Delta Platform Certificate Fields .............................................................................................................. 10
Table 3: Attribute Certificate Format Fields ........................................................................................................... 21
Table 4: Delta Attribute Certificate Format Fields ................................................................................................. 26

Copyright © TCG 2020

TCG Platform Certificate Profile
Specification Version 1.1

Change Log
Date

VersionComment

2018-01-11

1.0

Initial Release2020-04-03

1.1

Addition of Delta Platform Certificate and treehierarchy.
Section “Revocation of a Platform Certificate”
has been modified to include multiple causesof revocation.
Section “EK Certificates” clarifies which EK
Certificates must be included as reference.
Section “Holder” clarifies use of theTargettingInformation extension to reference
additional EK Certificates.
Section “X.509 ASN.1 Structures and OIDs”
includes the correct CertificateIdentifiersequence.
Section “Assertions Made by a Platform
Certificate” includes additional assertions.
Section “Platform Configuration Attributes”
was updated to include additional attributes.
Section “Targeting Information” was added.
Sample certificates were added to Appendix.
The following sections were removed:

Revision 19•

Platform Attribute Credential
Protection Requirements•

Security Qualities•

Conformance Attributesviii
TCG PUBLISHED

Privacy

10 April 2020

1

1. Introduction

2

1.1

3
4
5
6
7
8

The purpose of this document is to define the Platform Certificate profile. This specification
contains the description of the certificate and sample X.509 instances of the certificate which
vendors and customers could use with their products. This specification defines the Platform
Certificate for use with any TPM Family 1.2 and 2.0 version. This specification defines theabstract definition of the certificate and specifically how it would appear as an X.509
certificate.

910This specification builds upon the Platform Attribute Credential Profile version 1.0 [14] byincorporating the following changes:

Purpose11
12•

Fixed errors identified in the Platform Attribute Certificate specification version 1.0
errata document [14].

13
14
15

•

Modified the ComponentIdentifier field of the Platform Configuration attribute toinclude a reference to the component’s Platform Certificate. This change enables theissuer to construct a certificate tree of platform components and subcomponents.

16
17

•

Added the field componentClass to the ComponentIdentifier element to unambiguously
identify the type of component being referenced.

18
19

•

Introduced the definition for the Delta Platform Certificate, modified the TCG Attributes
definitions to identify applicability to the Delta Platform Certificate.

20
21

•

Removed the Platform Certificate public key certificate format since it was considered
redundant.

22
23

•

Added support for multiple TPM EK Certificates by allowing the issuer to include
multiple references using the TargetingInformation extension.

24•

Incorporated ComponentClass registry OID and value in the ComponentIdentifier field.

25
26
27
28

This specification replaces the existing Platform Credential Specification version 1.2 [6]. Thiscertificate attests that a specific manufactured platform, identified by the platform serial
number and TPM EK certificates, contains a unique TPM and Trusted Building Block (TBB).
TBB is defined in the TCG Generic Server Specification [9].

29

1.2

30
31
32

This document specifies a complete definition of the Platform Certificate for use with any TPM
Family version. This specification describes the abstract definition of the certificate andspecifically how it would appear as an X.509 certificate.

33

1.3

34
35
36
37
38
39

This specification references the TCG Infrastructure Working Group Reference Architecture
for Interoperability [2], the TCG TPM Main Specification [3], the TCG Credential Profiles for
TPM Family 1.2 [6], the EK Credential Profile Specification [7], the PC Client Platform TPM
Profile Specification [10], the Generic Server Platform Specification [9], and the TCG Algorithm
Registry Specification [12]. This specification replaces the Platform Credential Specification
defined in the TCG Credential Profiles for TPM Family 1.2 [6].

Document Scope

Relationship to Other TCG Specifications

Copyright © TCG 2020

TCG Platform Certificate Profile
Specification Version 1.1

40

1.4

41
42
43

The key words “MUST”, “MUST NOT”, “REQUIRED”, “SHALL”, “SHALL NOT”, “SHOULD”,“SHOULD NOT”, “RECOMMENDED”, “MAY”, and “OPTIONAL” in this document are to beinterpreted as described in RFC 2119 [4].

44

1.5

45
46
47
48

The intended audience for this document is people who work for the entities, such as PrivacyCAs (AKA Attestation CAs), who are expected to participate in the TCG infrastructure. People
who work for computer OEMs and the companies in the OEM supply chain, such as TPM
vendors and software vendors, are also intended audiences for this document.

49

1.6

50
51
52

The TCG Glossary [1] contains definitions that are fundamental to this specification. Rather
than repeat those definitions, the reader is assumed to be familiar with the terms in the TCG
glossary.

53

The following operational definitions, however, are specific to this specification.

54
55
56
57

Certificate – An artifact that cryptographically binds a subject’s identity to its public key or
attributes using the industry-standard certificate structure from ISO/IEC/ITU-T X.509
version 3. Certificate generation consists of (a) assembling values for the certificate fields and(b) signing over the assembled fields.

Keywords

Intended Audiences

Definition of Terms

58
59
60
61
62

NOTE: The term “Credential” has been replaced with “Certificate” throughout the document.
Certificate is a more precise term to describe this artifact. Any uses of the word “Credential”
in this document refer to titles of previously published specifications, attributes, or
extensions.

Revision 19

2
TCG PUBLISHED

10 April 2020

63

2. Certificate Overview

64
65
66

This section describes the Platform Certificate type. The Platform Certificate provides thefoundation for binding the identity of the platform to the TPM and the Trusted Building Blockof the platform.

67

2.1

68
69

A Platform Certificate attests that a specific platform contains a unique TPM and Trusted
Building Block (TBB).

70
71
72
73
74
75

A TBB consists of the parts of the Root of Trust that do not have shielded locations orprotected capabilities. Normally, this includes just the Core Root of Trust for Measurement(CRTM) and the TPM initialization functions. The definition of a TBB is typically platform
specific. One example of a TBB, specific to the PC Client platform, is the combination of
CRTM, connection of the CRTM storage to the motherboard, and mechanisms for determining
Physical Presence.

76
77
78
79

Platform Certificates contain assertions about trust made by a platform manufacturer. The
certificate asserts the platform’s security properties and configuration as shipped. Delta
Platform Certificates are used to reflect platform changes made by system integrators,
resellers, and other entities after the platform has left the manufacturer’s facility.

80

2.1.1

81
82
83
84

A consumer of a Platform Certificate is a Privacy-CA. A Platform Certificate contains
information that the Privacy-CA can use in attesting to the integrity characteristics of aplatform. The Privacy-CA can copy field entries from the Platform Certificate to a new AK
Certificate that the Privacy-CA creates for a trusted platform.

85
86
87
88
89
90
91
92
93

Another consumer of the Platform Certificate is an Enterprise, which wishes to remotely
provision multiple devices that belong to it. Typically, in this case, the Enterprise knows theserial number of the systems it owns, and the Platform Certificate is used to associate those
serial numbers with particular EK certificates [6][7]. This way, for example, a VPN can beprovisioned using the TPM to provide keys securely to clients of an Enterprise. In order tosupport this use case, the optional Platform Serial Number attribute MUST be included in
the certificate. In addition, an Enterprise could use the Platform Certificate to assert nonsecurity related properties, such as platform components, included optionally by the platform
manufacturer in the certificate.

9495

For other users of the Platform Certificate, refer to section 6.2 Platform Endorsement
Credential of Reference Architecture for Interoperability Specification [2].

96

2.1.2

97
98
99
100
101
102

In general, the issuer of a Platform Certificate is the platform manufacturer (for example, anOEM). An entity should not generate a Platform Certificate unless the entity is satisfied thatthe platform contains the TPM referenced inside the certificate. Other types of entities in theplatform manufacturing supply chain could issue a Platform Certificate. For more
information, refer to section 3 The Trusted Platform Lifecycle of Reference Architecture forInteroperability Specification [2].

Platform Certificate

Who Uses a Platform Certificate?

Who Issues a Platform Certificate?

Copyright © TCG 2020

TCG Platform Certificate Profile
Specification Version 1.1

103

2.1.3

104
105
106
107
108

A Platform Certificate could be revoked by the platform manufacturer if there is evidence ofCA compromise. Other reasons for revocation include replacement of a platform’s TPM,
replacement of the Endorsement Key, or reissuance of the EK certificate. Platform
configuration changes made after the platform is shipped can be addressed by the issuanceof a Delta Platform Certificate.

109

2.1.4

110
111

A Platform Certificate is not expected to expire during the normal life expectancy of theplatform.

112

2.1.5

113
114

The following table lists all the fields that are central to the use of this certificate and which
MUST or MAY be in a Platform Certificate.

Revocation of a Platform Certificate

Validity Period of a Platform Certificate

Assertions Made by a Platform Certificate

115
Field Name

Description

Field Status

Certificate Type LabelDistinguish certificate types issued
under a shared key

MUST

EK Certificates

Identifies the associated EK Certificates

MUST

Platform Manufacturer
StringName of platform manufacturer as astringMUST

Platform Model

Manufacturer-specific identifier

MUST

Platform Version

Manufacturer-specific identifier

MUST

IssuerIdentifies the issuer of the certificate

MUST

Platform Specification

Platform Specification to which thisplatform is built

MUST

Certificate
Specification

Platform Certificate Specification Version,Level, and Revision

MUST

Validity Period

Time period when certificate is valid

MUST

Signature Value

Signature of the issuer over the otherfieldsMUST

Platform Serial
NumberPlatform’s unique serial number

MAY

Platform Assertions

Security assertions about the platform

MAY

Revision 19

4
TCG PUBLISHED

10 April 2020

Platform Configuration

Non-security related platform properties

MAY

Platform Manufacturer
Identifier

Platform manufacturer unique identifier
as an IANA identifier

MAY

Platform Configuration
Uri

URI where PCR information can beobtained

MAY

Policy Reference

Certificate policy reference

MAY

Revocation Locator

Identifies source of revocation status
information

MAY

116

Table 1: Platform Certificate Fields

117

2.1.5.1

118
119
120
121
122

The label enables the issuer to sign the certificate with a key that is not reserved exclusively
for signing a Platform Certificate. It allows different types of certificates to be reliably
distinguished from each other by this label instead of based on which signer key was used.
TCG [3] reserved this flexible key re-purposing capability and the certificate labels have beenretained for compatibility.

123
124

For Platform Certificates, the value of this field MUST be the string, “TCG Trusted Platform
Endorsement”.

125

2.1.5.2

126
127

This assertion is used by the Privacy-CA to verify that the platform contains a unique TPM
referenced by this Platform Certificate.

128
129
130
131
132
133
134

This SHALL be an unambiguous indication of the EK Certificates of the TPM incorporated
into the platform. The Platform Certificate SHALL contain references to all TCG required
Endorsement Key (EK) Certificates. The “TCG Infrastructure Working Group Reference
Architecture for Interoperability (Part I)” [2] requires the TPM Manufacturer to issue an EK
Certificate for each TPM Endorsement Key. The Platform Certificate MAY also containreferences to optional EK Certificates, such as those issued by the Platform OEM or Platform
Owner.

135

2.1.5.3

136137This assertion identifies the platform manufacturer using a Platform Manufacturer assigned
string.

138

2.1.5.4

139
140
141

This assertion identifies the platform manufacturer with a globally unique and verifiablevalue. If included, the issuer SHALL use the manufacturer’s Internet Assigned Numbers
Authority (IANA) Private Enterprise Number as the identifier [8].

Certificate Type Label

EK Certificates

Platform Manufacturer String

Platform Manufacturer IdentifierCopyright © TCG 2020

TCG Platform Certificate Profile
Specification Version 1.1

142

2.1.5.5

143
144

This assertion identifies the specific platform model implementation. This is used by a
Privacy-CA to verify that the platform contains a specific root of trust implementation.

145

The platform model is encoded as a string and is manufacturer-specific.

146

2.1.5.6

147
148

This assertion identifies the specific version of the platform. This is used by a Privacy-CA toverify that the platform contains a specific root of trust implementation.

149
150

The platform version is encoded as a string and is the manufacturer-specific implementation
version of the platform.

151

2.1.5.7

152

This assertion identifies the entity that signed and issued the Platform Certificate.

153

2.1.5.8

154
155
156

This assertion identifies the relevant TCG platform specific specification to which the platform
was designed. This describes the platform class as well as the major and minor version
number and the revision level.

157

2.1.5.9

158
159

This assertions identifies the Platform Certificate Profile Specification version. Includes thisspecification’s Version, Level, and Revision.

160

2.1.5.10 Validity Period

161
162

This assertion enables the certificate user to determine whether the Platform Certificate has
begun to be valid or has expired.

163

2.1.5.11 Signature Value

164

This assertion is the signature of the issuer over the other fields in the certificate.

165

2.1.5.12 Platform Serial Number

166
167
168
169
170

This assertion is a value that uniquely identifies the platform. This is used by the verifier tocorrelate the certificate to a physical platform. The manufacturer SHALL use a customer
visible serial number as the identifier. Even though this attribute is OPTIONAL, the field
MUST be included when enabling Enterprise use cases such as remote provisioning using
the platform TPM.

171

The Platform Serial Number is encoded as a string and is manufacturer specific.

172

2.1.5.13 Platform Assertions

173
174
175

This field contains assertions about the general security properties of the platform. This could
be used by the certificate user to verify that the platform implements acceptable security
policies.

Platform Model

Platform Version

IssuerPlatform Specification

Certificate Specification

Revision 19

6
TCG PUBLISHED

10 April 2020

176

For more information, see section 5 Entities, Assertions and Signed Structures [2].

177

2.1.5.14 Platform Configuration

178
179
180

This field contains assertions of properties that are not security related. These properties MAY
include the platform’s component serial numbers, network adapter MAC addresses, andmotherboard serial number.

181

2.1.5.15 Platform Configuration Uri

182
183

This assertion provides an optional Uniform Resource Identifier where valid PCR and platform
configuration information can be obtained.

184

2.1.5.16 Policy Reference

185
186

This assertion enables the certificate user to identify the certificate issuance policy of the
Platform Certificate issuer.

187

2.1.5.17 Revocation Locator

188
189

This assertion enables the certificate consumer to determine whether the Platform Certificate
has been revoked and should no longer be used as the basis for a trust decision.

190

2.2

191
192
193
194

A Delta Platform Certificate attests to specific changes made to the platform that are notreflected in the original Platform Certificate. A system integrator or value added retailer (VAR)
can make modifications to a platform resulting in the Platform Certificate inaccuratelyreflecting its current configuration.

195
196
197
198
199
200
201
202

The entity making platform modifications could issue a Delta Platform Certificate to reflect
those changes. A chain consisting of a Platform Certificate followed by multiple Delta Platform
Certificates is supported in cases where multiple entities make valid modifications to aplatform. A Delta Platform Certificate MUST only include additions, modifications anddeletions of certain platform attributes. The issuer of the Delta Platform Certificate MUST
verify that the changes made to the platform are adequately represented by the Delta Platform
Certificate and that the Delta Platform Certificate references the appropriate base Platform orDelta Certificate.

203
204

Figure 1 illustrates how a chain of Platform and Delta Platform certificates can be constructedby linking the certificates using a base certificate reference.

Delta Platform Certificate

Copyright © TCG 2020

TCG Platform Certificate Profile
Specification Version 1.1

Platform
Manufacturer

System Integrator

VAR

Platform
Certificate

Delta
Platform
Certificate

Delta
Platform
Certificate

Base certificate

Base certificate

Issuance sequence
Verification path
205
206

Figure 1: Delta Platform Certificate chain

207
208

2.2.1

209
210
211

A Delta Platform Certificate will be used by Privacy-CAs and Enterprises wanting to verifychanges in platform attributes. This certificate allows a verifier to attest changes made to theplatform as it progresses through the supply chain.

212

2.2.2

213
214
215

In addition to the entities that traditionally issue Platform Certificates, a system integrator orvalue added reseller could issue a Delta Platform Certificate to reflect platform attributechanges.

216

2.2.3

217
218
219

Any authorized entity, typically a system integrator or value added retailer, modifying aplatform’s configuration can issue a Delta Platform Certificate. This certificate MAY be issued
as long as the following conditions are maintained:

Who Uses a Delta Platform Certificate?

Who Issues a Delta Platform Certificate?

Conditions for Issuing a Delta Platform Certificate

220
221

•

Changes made to the platform do not invalidate the TBB security claims made by theoriginal platform manufacturer.

222
223

•

Changes made to the platform do not invalidate the TCG Platform Specification
compliance claims made by the platform manufacturer.

224
225

•

The platform TPM is not altered or replaced (including replacement of EK keys or EK
certificates).

226

2.2.4

227
228

An entity wanting to issue a Delta Platform Certificate MUST adhere to the following set of
requirements:

Requirements for Issuing a Delta Platform Certificate

Revision 19

8
TCG PUBLISHED

10 April 2020

229
230

•

The Delta Platform Certificate issuer MUST NOT invalidate platform security assertions
made by the base Platform Certificate.

231
232

•

Platform changes made by the issuer MUST NOT introduce non-compliances to the
TCG Platform Specification identified in the TCG Specification Attribute (Section 3.1.3).

233
234
235
236

•

The issuing entity MUST NOT modify the TPM embedded in the platform, including
invalidating the EK keys or EK certificates. For example, the issuer may not call
ChangeEPS on the TPM. Doing so would break the binding between the base Platform
Certificate and the TPM.

237
238

•

The issuing entity MAY issue new EK keys and certificates, and include references tothese certificates in the Delta Platform Certificate.

239

2.2.5

240
241
242
243

If the platform is modified such that the chain of the Platform Certificate and the sequence ofDelta Platform Certificates no longer reflects the configuration of the platform, a new Delta
Platform Certificate can be issued. The current Delta Platform Certificate becomes the newbase certificate.

244
245

A Delta Certificate could be revoked if there is evidence of CA compromise, or in cases where
the base Platform Certificate or base Delta Platform Certificate are revoked.

246

2.2.6

247
248

The following table lists all the fields that are central to the use of this certificate type andwhich MUST or MAY be in a Delta Platform Certificate.

Revocation of a Delta Platform Certificate

Assertions Made by a Delta Platform Certificate

249
Field Name

Description

Field Status

Certificate Type LabelDistinguishes certificate types issued
under a shared key

MUST

Base Platform
Certificate

Identifies the base Platform or Delta
Platform certificate

MUST

Platform Manufacturer
StringName of platform manufacturer as astringMUST

Platform Model

Manufacturer-specific identifier

MUST

Platform Version

Manufacturer-specific identifier

MUST

IssuerIdentifies the issuer of certificate

MUST

Certificate
Specification

Platform Certificate Specification Version,Level, and Revision

MUST

Validity Period

Time period when the certificate is valid

MUSTCopyright © TCG 2020

TCG Platform Certificate Profile
Specification Version 1.1

Signature Value

Signature of the issuer over the otherfieldsMUST

Platform Serial
NumberPlatform’s unique serial number

MAY

Platform Configuration

Non-security related platform properties

MAY

Platform Manufacturer
Identifier

Platform manufacturer unique identifier
as an IANA identifier

MAY

Platform Configuration
Uri

URI where PCR information can beobtained

MAY

Policy Reference

Certificate policy reference

MAY

Revocation Locator

Identifies source of revocation status
information

MAY

EK Certificates

Identifies newly issued EK Certificates

MAY

250

Table 2: Delta Platform Certificate Fields

251

2.2.6.1

252
253

For Platform Certificates, the value of this field MUST be the string, “TCG Trusted Platform
Endorsement”.

254

2.2.6.2

255
256This assertion is used to reference additional EK certificates issued by the Delta Platform
Certificate issuer.

257
258

This SHALL be an unambiguous indication of the EK certificates of the TPM incorporated into
the platform.

259

2.2.6.3

260
261
262

This assertion is used by the verifier to bind the certificate to the previously issued Platform
Certificate or Delta Platform Certificate. The base certificate is the previously issued Platform
Certificate or Delta Platform Certificate amended by this certificate.

263

This SHALL be an unambiguous indication of the base Platform Certificate.

264

2.2.6.4

265
266
267

This assertion identifies the platform manufacturer using a Platform Manufacturer assigned
string. This field MUST equal that of the base Platform Certificate or base Delta Platform
Certificate.

Certificate Type Label

EK CertificatesBase Platform Certificate

Platform Manufacturer String

Revision 19

10
TCG PUBLISHED

10 April 2020

268

2.2.6.5

269
270
271
272

This assertion identifies the platform manufacturer with a globally unique and verifiablevalue. If included, the issuer SHALL use the manufacturer’s Internet Assigned Numbers
Authority (IANA) Private Enterprise Number as the identifier [8]. This field MUST equal thatof the base Platform Certificate or base Delta Platform Certificate.

273

2.2.6.6

274
275
276

This assertion identifies the specific platform model implementation. This is used by a
Privacy-CA to verify that the platform contains a specific root of trust implementation. This
field MUST equal that of the base Platform Certificate or base Delta Platform Certificate.

277

The platform model is encoded as a string and is manufacturer-specific.

278

2.2.6.7

279
280
281

This assertion identifies the specific version of the platform. This is used by a Privacy-CA toverify that the platform contains a specific root of trust implementation. This field MUST equalthat of the base Platform Certificate or base Delta Platform Certificate.

282
283

The platform version is encoded as a string and is the manufacturer-specific implementation
version of the platform.

284

2.2.6.8285

This assertion identifies the entity that signed and issued the Delta Platform Certificate.

286

2.2.6.9

287
288
289

This assertion identifies the Platform Certificate Profile Specification version. This assertion
includes the Platform Certificate Profile specification’s Version, Level, and Revision. Included
only if the delta certificate is issued under an updated version of this specification.

290

2.2.6.10 Validity Period291

The validity period’s “Not After” date MUST match that of the base certificate.

292

2.2.6.11 Signature Value

293

This assertion is the signature of the issuer over the other fields in the certificate.

294

2.2.6.12 Platform Serial Number

295
296
297
298

This assertion is a value that uniquely identifies the platform. This is used by the verifier tocorrelate the certificate to a physical platform. The issuer SHALL use a customer visible serial
number as the identifier. This field MUST equal that of the base Platform Certificate or base
Delta Platform Certificate.

299

The Platform Serial Number is encoded as a string and is manufacturer specific.

Platform Manufacturer Identifier

Platform Model

Platform Version

IssuerCertificate Specification

Copyright © TCG 2020

TCG Platform Certificate Profile
Specification Version 1.1

300

2.2.6.13 Platform Configuration

301
302
303

This field contains assertions of properties that are not security related. The Delta Platform
Certificate MUST only include platform properties that have changed (added, modified, ordeleted) with respect to the base certificate.

304

2.2.6.14 Platform Configuration Uri

305
306
307

This assertion provides an optional Uniform Resource Identifier where valid PCR and platform
configuration information can be obtained. This field MAY be included only if the Platform
Configuration Uri has changed.

308

2.2.6.15 Policy Reference

309
310

This assertion enables the certificate user to identify the certificate issuance policy of the
Delta Platform Certificate issuer.

311

2.2.6.16 Revocation Locator

312
313

This assertion enables the certificate consumer to determine whether the Delta Platform
Certificate has been revoked and should no longer be used as the basis for a trust decision.

Revision 19

12
TCG PUBLISHED

10 April 2020

314

3. X.509 ASN.1 Definitions

315
316
317

This section contains the format for the Platform Attribute Certificate instantiated as an X.509
certificate for all the common and information fields in this specification. All fields are definedin ASN.1 and encoded using DER.

318

3.1

TCG Attributes

319

3.1.1

TPM and Platform Assertions

320

These attributes describe security-related assertions about the TPM or platform TBB.

321
322
323
324

Each attribute begins with a version number that identifies the version of the assertion
syntax. Future versions of this profile could add new assertions by appending new fields atthe end of the ASN.1 SEQUENCE and increasing the version number to identify which versionof the assertion syntax is encoded.

325
326
327

The MeasurementRootType indicates which types of Root of Trust for Measurement are
implemented as part of the platform TBB. A Static RTM is required and support for a dynamic
RTM is optional.

328
329
330
331
332

In the CommonCriteriaMeasures, the profile and target for the evaluation can be describedby either an OID, a URI to a document describing the value, or both. If both are present, they
MUST represent consistent values. The URI values are included in an URIReference which
describes the URI to the document and a cryptographic hash value which identifies a specificversion of the document.

333
334
335
336
337
338
339
340
341

The tBBSecurityAssertions attribute MUST NOT be included in the Delta Platform
Certificate.

342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361

STRMAX is a constant defining the upper bound on the length of a string type. Like the URIMAX
this is to aid ASN.1 parsers and help limit the upper bound on the length of the certificate.
Based on the expected sizes of the strings in the ASN.1 in this document an upper bound of
256 was selected. STRMAX SHOULD NOT exceed a value of 256.

URIMAX is a constant used to provide an upper bound on the length of a URI included in thecertificate. This upper bound is helpful to consumers of the extension and also helps limit
the overall size of the certificate. In order to provide a reasonable upper bound for ASN.1
parsers, URIMAX SHOULD NOT exceed a value of 1024. This value was selected as it matches
the length limit for <A> anchors in HTML as specified by the SGML declaration (LITLEN) for
HTML[5].

Version ::= INTEGER { v1(0) }tBBSecurityAssertions ATTRIBUTE ::= {WITH SYNTAX TBBSecurityAssertions
ID tcg-at-tbbSecurityAssertions }TBBSecurityAssertions ::= SEQUENCE {version Version DEFAULT v1,
ccInfo [0] IMPLICIT CommonCriteriaMeasures OPTIONAL,
fipsLevel [1] IMPLICIT FIPSLevel OPTIONAL,
rtmType [2] IMPLICIT MeasurementRootType OPTIONAL,
iso9000Certified BOOLEAN DEFAULT FALSE,
iso9000Uri IA5STRING (SIZE (1..URIMAX) OPTIONAL }-- Hybrid means the measurement root is capable of static AND dynamic-- Physical means that the root is anchored by a physical TPM

Copyright © TCG 2020

362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426

TCG Platform Certificate Profile
Specification Version 1.1-- Virtual means the TPM is virtualized (possibly running in a VMM).
-- TPMs or RTMs might leverage other lower layer RTMs to virtualize the-- the capabilities of the platform.
MeasurementRootType ::= ENUMERATED {static (0),dynamic (1),nonHost (2),hybrid (3),physical (4),virtual (5) }-- common criteria evaluation
CommonCriteriaMeasures ::= SEQUENCE {version IA5STRING (SIZE (1..STRMAX)), -- “2.2” or “3.1”; future syntax defined by CC
assurancelevel EvaluationAssuranceLevel,
evaluationStatus EvalutionStatus,
plus BOOLEAN DEFAULT FALSE,
strengthOfFunction [0] IMPLICIT StrengthOfFunction OPTIONAL,
profileOid [1] IMPLICIT OBJECT IDENTIFIER OPTIONAL,
profileUri [2] IMPLICIT URIReference OPTIONAL,
targetOid [3] IMPLICIT OBJECT IDENTIFIER OPTIONAL,
targetUri [4] IMPLICIT URIReference OPTIONAL }EvaluationAssuranceLevel ::= ENUMERATED {levell (1),level2 (2),level3 (3),level4 (4),level5 (5),level6 (6),level7 (7) }StrengthOfFunction ::= ENUMERATED {basic (0),medium (1),high (2) }-- Reference to external document containing information relevant to this subject.
-- The hashAlgorithm and hashValue MUST both exist in each reference if either-- appear at all.
URIReference ::= SEQUENCE {uniformResourceIdentifier IA5String (SIZE (1..URIMAX)),
hashAlgorithm AlgorithmIdentifier OPTIONAL,
hashValue BIT STRING OPTIONAL }EvaluationStatus ::= ENUMERATED {designedToMeet (0),evaluationInProgress (1),evaluationCompleted (2) }-- fips evaluation
FIPSLevel ::= SEQUENCE {version IA5STRING (SIZE (1..STRMAX)), -- “140-1”, “140-2”, or “140-3”level SecurityLevel,plus BOOLEAN DEFAULT FALSE }SecurityLevel ::= ENUMERATED {level1 (1),level2 (2),level3 (3),level4 (4) }Revision 19

14
TCG PUBLISHED

10 April 2020

427

3.1.2

428
429

The following definitions define the syntax of the relative distinguished names (RDNs) usedin the subject alternative name extension to identify the type of the TPM and the platform.

430
431

The value of the PlatformManufacturerStr attribute is a UTF 8 string with the name ofplatform manufacturing company.

432

The PlatformModel attribute is a UTF 8 string with the manufacturer-specific model.

433
434

The PlatformVersion attribute is a UTF 8 string with manufacturer-specific platform version
value.

435
436

The PlatformSerial optional attribute is a UTF 8 string with manufacturer-specific platform
serial number value.

437
438

The PlaftformManufacturerId optional attribute is the OID of the IANA Private Enterprise
Number [8] assigned to the platform manufacturer.

439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473

These attributes MUST be included in the Delta Platform Certificate.

474

3.1.3

475
476

The following definitions define the syntax of the TPM and platform-specific specification
attributes.

477
478
479

The TCGPlatformSpecification attribute identifies the platform class, version and revisionof the platform-specific specification with which a platform implementation is compliant. The
platform specification refers either to the PC Client Platform Specification [10] or the Server

Name Attributes

PlatformManufacturerStr ATTRIBUTE ::= {WITH SYNTAX UTF8String (SIZE (1..STRMAX))
ID tcg-at-platformManufacturerStr }PlatformModel ATTRIBUTE ::= {WITH SYNTAX UTF8String (SIZE (1..STRMAX))
ID tcg-at-platformModel }PlatformVersion ATTRIBUTE ::= {WITH SYNTAX UTF8String (SIZE (1..STRMAX))
ID tcg-at-platformVersion }PlatformSerial ATTRIBUTE ::= {WITH SYNTAX UTF8String (SIZE (1..STRMAX))
ID tcg-at-platformSerial }PlatformManufacturerId ATTRIBUTE ::= {WITH SYNTAX ManufacturerId
ID tcg-at-platformManufacturerId}
ManufacturerId ::= SEQUENCE {manufacturerIdentifier
PrivateEnterpriseNumber}
enterprise OBJECT IDENTIFIER :: = {iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1)}PrivateEnterpriseNumber OBJECT IDENTIFIER :: = { enterprise private-enterprise-number }All assigned private enterprise numbers are listed at the Internet Assigned Numbers
Authority (IANA) web site [8].

TCG Specification Attributes

Copyright © TCG 2020

TCG Platform Certificate Profile
Specification Version 1.1

480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495

Specification [9]. Standardized platform class values are defined in section 4 Platform Classof the Registry of Reserved TPM 2.0 Handles and Localities [22]. This attribute MUST NOT be
included in the Delta Platform Certificate.

496

3.1.4

497

The following defines the syntax of the certificate type attribute.

498
499
500
501
502
503
504
505
506
507
508
509
510
511

The TCGCredentialType attribute identifies the type of Platform Certificate. Values
supported are Platform Certificate and Delta Platform Certificate in both attribute and public
key formats. Values are encoded as TCG registered OIDs. This attribute MUST be includedin the Delta Platform Certificate to differentiate from a Platform Certificate.

512

3.1.5

513

The following defines the syntax of the certificate specification attributes.

514
515
516
517
518
519
520
521
522
523
524
525

The TCGCredentialSpecification attribute identifies the major version, minor version, andrevision of the certificate specification with which a certificate is compliant. Values are
encoded as three integers in this attribute. This attribute MAY be included in the Delta
Platform Certificate if issued under a different specification version than the base certificate.

526

3.1.6

527

The following defines the syntax of the platform configuration attribute.

528
529
530

The platformConfiguration attribute contains optional lists of platform component
identifiers, component identifier URI, platform properties, and platform property URI. The
componentIndentifer field contains a list of individual components that constitute thetCGPlatformSpecification ATTRIBUTE ::= {WITH SYNTAX TCGPlatformSpecification
ID tcg-at-tcgPlatformSpecification }TCGSpecificationVersion ::= SEQUENCE {majorVersion INTEGER,
minorVersion INTEGER,
revision INTEGER }TCGPlatformSpecification ::= SEQUENCE {Version TCGSpecificationVersion,
platformClass OCTET STRING SIZE(4) }TCG Certificate Type Attributes

tCGCredentialType ATTRIBUTE ::= {WITH SYNTAX TCGCredentialType
ID tcg-at-tcgCredentialType}TCGCredentialType::= SEQUENCE {certificateType CredentialType}
CredentialType::=
OBJECT
IDENTIFIER
DeltaPlatformAttributeCertificate )(tcg-kp-PlatformAttributeCertificate|

tcg-kp-

TCG Certificate Specification Attributes

tCGCredentialSpecification ATTRIBUTE ::= {WITH SYNTAX TCGSpecificationVersion
ID tcg-at-tcgCredentialSpecification }TCGSpecificationVersion ::= SEQUENCE {majorVersion INTEGER,
minorVersion INTEGER,
revision INTEGER }Platform Configuration Attributes

Revision 19

16
TCG PUBLISHED

10 April 2020

531
532
533
534
535

platform. The issuer MUST include the component class, manufacturer and model, andoptionally provide the component serial number, revision, and the component manufacturer’s
IANA PrivateEnterpriseNumber. In addition, each component identifier MAY contain
information such as whether it is field replaceable, its network address, platform certificate,and platform certificate URI.

536
537
538
539
540

The componentClass sequence is used to identify the type of component. The
componentClass field consists of a componentClassRegistry OID and thecomponentClassValue. The componentClassRegistry OID allows the issuer to convey
which component class registry is used to identify the component. The
componentClassValue is the specific registry value for the component.

541
542
543
544
545
546
547
548
549
550
551

The componentPlatformCert field contains information about the component’s Platform
Certificate. This field allows the issuer to create a hierarchy of platforms by constructing ageneral tree of Platform Certificates. The issuer MUST include attributeCertificateIdentifier orgenericCertIdentifier to provide a reference to the component’s Platform Certificate. The
verifier can use the componentPlatformCert attribute to cryptographically verify theconstituent components and subcomponents of a platform. In order to verify the certificate
hierarchy, the verifier can use the attributeCertIdentifier or genericCertIdentifier
fields to identify the component Platform Certificate. This operation would have to be repeated
for any component of the platform, and subsequently down the hierarchical tree. The verifier
can use this information to effectively confirm a platform’s components remain unchanged
from the as-built configuration.

552
553

The platform manufacturer can use the componentPlatformCertificateUri to identify the
public distribution point of the component platform certificate.

554
555

The status field contained within the componentIdentifier field MUST be used only in
Delta Platform Certificates.

556
557
558
559
560
561

The optional platformProperties field SHALL contain characteristics of the platform thatthe issuer considers of interest to the consumer. Such properties are not prescribed by thisspecification and the certificate issuer is free to choose which information to include in thisfield. The manufacturer MAY use the platformPropertiesUri to publish information about
the Properties included in the platformProperties field. This MAY include the list of
propertyName and their semantics.

562
563

The status field contained within the Properties field MUST be used only in Delta Platform
Certificates.

564
565
566
567
568

The platformConfiguration attribute MAY be included in the Delta Platform Certificate toreflect changes made to the componentIdentifiers, componentIdentifiersUri,platformProperties, and platformPropertiesUri fields. In this case, the status
enumerator MUST be included to indicate whether the field was added, modified, or removed
from the base certificate.

569
570
571
572
573
574
575
576
577

platformConfiguration ATTRIBUTE ::= {WITH SYNTAX PlatformConfiguration
ID tcg-at-platformConfiguration-v2}
PlatformConfiguration ::= SEQUENCE {componentIdentifiers [0] IMPLICIT SEQUENCE(SIZE(1..MAX)) OF ComponentIdentifier OPTIONAL,
componentIdentifiersUri [1] IMPLICIT URIReference OPTIONAL,Copyright © TCG 2020

578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642

TCG Platform Certificate Profile
Specification Version 1.1

platformProperties [2] IMPLICIT SEQUENCE(SIZE(1..MAX)) OF Property OPTIONAL,
platformPropertiesUri [3] IMPLICIT URIReference OPTIONAL}
ComponentIdentifier ::= SEQUENCE {componentClass ComponentClass,componentManufacturer UTF8String (SIZE (1..STRMAX)),
componentModel UTF8String (SIZE (1..STRMAX)),
componentSerial[0] IMPLICIT UTF8String (SIZE (1..STRMAX)) OPTIONAL,
componentRevision [1] IMPLICIT UTF8String (SIZE (1..STRMAX)) OPTIONAL,
componentManufacturerId [2] IMPLICIT PrivateEnterpriseNumber OPTIONAL,
fieldReplaceable [3] IMPLICIT BOOLEAN OPTIONAL,
componentAddresses [4] IMPLICIT SEQUENCE(SIZE(1.. MAX)) OF ComponentAddresscomponentPlatformCert [5] IMPLICIT CertificateIdentifier OPTIONAL,
componentPlatformCertUri [6] IMPLICIT URIReference OPTIONAL,
status [7] IMPLICIT AttributeStatus OPTIONAL }OPTIONAL

ComponentClass ::= SEQUENCE {componentClassRegistry ComponentClassRegistry,componentClassValue OCTET STRING SIZE(4) }ComponentClassRegistry ::= OBJECT IDENTIFIER ( tcg-registry-componentClass-tcg | tcg-registrycomponentClass-ietf | tcg-registry-componentClass-dmtf )ComponentAddress ::= SEQUENCE {addressType AddressType,addressValue UTF8String (SIZE (1..STRMAX)) }AddressType ::= OBJECT IDENTIFIER (tcg-address-ethernetmac | tcg-address-wlanmac | tcg-addressbluetoothmac)
Property ::= SEQUENCE {propertyName UTF8String (SIZE (1..STRMAX)),propertyValue UTF8String (SIZE (1..STRMAX)),status [0] IMPLICIT AttributeStatus OPTIONAL}

CertificateIdentifier::= SEQUENCE {attributeCertIdentifier[0] IMPLICIT AttributeCertificateIdentifier
genericCertIdentifier[1] IMPLICIT IssuerSerial
OPTIONAL }OPTIONAL,

AttributeCertificateIdentifier ::= SEQUENCE {hashAlgorithm
AlgorithmIdentifier,hashOverSignatureValue
OCTET STRING}
IssuerSerial ::= SEQUENCE {issuer
GeneralNames,
serialCertificateSerialNumber}
AttributeStatus ::= ENUMERATED {added (0),modified (1),removed (2) }Three ComponentClassRegistry OIDs have been defined by the TCG. The tcg-registrycomponentClass-tcg is a placeholder that refers to a future TCG Component Class
Registry. The tcg-registry-componentClass-ietf refers to the IETF RFC8348 [19] IANA
Hardware Class. The tcg-registry-componentClass-dmtf is a placeholder to refer to afuture SMBIOS based registry.
The AttributeCertificateIdentifier sequence is comprised of the hashAlgorithm field
and the hashOverSignatureValue. The hashAlgorithm field is of type AlgorithmIdentifier as
defined in RFC5280 [13]. This field identifies the hashing algorithm used in
hashOverSignatureValue field. The hashOverSignatureValue is calculated over the Platform
Revision 19

18
TCG PUBLISHED

10 April 2020

643
644

Certificate’s BIT STRING signatureValue (excluding the tag, length, and number of unusedbits).

645
646
647
648
649

The definition of AlgorithmIdentifier from RFC5280 [13] is provided here for convenience:

650
651
652

Since the algorithms used are all hashing algorithms, the parameters field SHOULD not be
used. The issuer MAY utilize any of the hash algorithm OIDs found in RFC3279 [15], RFC4055[16], SHA-3 Related Algorithms and Identifiers for PKIX [17], and GB/T 33560-2017 [18].

653
654

MAX is to be interpreted, as described in RFC 5280[13], to mean the upper bound isunspecified.

655
656
657
658
659
660
661

NOTE: Parsers and verifiers should be version aware, and make the necessary adjustments
to support current and prior versions of the platformConfiguration attribute. Futureversions of this specification could introduce modifications to the platformConfiguration
attribute. If such changes impact the structure and semantics of existing fields(componentIdentifiers,
componentIdentifiersURI,
platformProperties,
andplatformPropertiesURI) the attribute’s OID will be updated to the next version (tcg-atplatformConfiguration-v3).

662

3.1.7

663

The following defines the syntax of the platform configuration Uri attribute.

664
665
666
667
668
669
670
671

The PlatformConfigUri attribute contains the URI where the reference integrity
measurements could be obtained by the verifier. The format used to convey the reference
measurement values is vendor specific and not defined by the TCG. This field uses an
URIReference sequence.

672
673

The PlatformConfigUri attribute MAY be included in the Delta Platform Certificate to assertchanges to the URI where PCR values are published.

674

3.2

675
676

This section contains the format for a Platform Certificate conforming to version 1.0 of thisspecification.

677
678
679

The Platform Certificate makes the assertions listed in section 2.1.6. This certificate format
adheres to RFC 5755 [11] and all requirements and limitations from that specification apply
unless otherwise noted.

680
681
682

NOTE: some fields are assigned a value even though the certificate user performs no action
with that value. In such cases, the intention is to inhibit non-TCG implementations frommaking inappropriate use of the certificate.

AlgorithmIdentifier ::= SEQUENCE {algorithm OBJECT IDENTIFIER,
parameters ANY DEFINED BY algorithm OPTIONAL }Platform Configuration Uri Attribute

PlatformConfigUri ATTRIBUTE ::= {WITH SYNTAX URIReference
ID tcg-at-platformConfigUri }Platform Certificate

Copyright © TCG 2020

TCG Platform Certificate Profile
Specification Version 1.1

Field Name

RFC 5755 Type

Value

Field Status

VersionINTEGERV2 (encoded as value 1)

Standard

Serial Number

INTEGER

Positive integer value uniquerelative to the issuer

Standard

Signature
Algorithm

AlgorithmIdentifier

Algorithm used by the issuer tosign this certificate

Standard

HolderHolderIdentity of the associated TPM
EK Certificate, use
BaseCertificateID. Additional EK
Certificates can be referenced
using the TargetingInformation
extension.

Standard

IssuerNameDistinguished name of theplatform certificate issuer

Standard

Validity

notBefore
notAfter

Beginning and end of validity
periodStandard

Attributes
TBB Security
Assertions

Standard
version
ccInfofipsLevel

Describes security-related
assertions about the platformTBB

SHOULD

Identifies platform class,version, and revision pf theplatform-specific specification

SHOULD

rtmType
iso9000Certified
iso9000Uri
TCG Platform
Specification

majorVersion
minorVersion
revision
platformClass

TCG
Certificate
TypecredentialType

Identifies the Platform
Certificate in attribute certificate
formatSHOULD

TCG
Certificate
Specification

majorVersion

Major, minor, and revision of
the Platform Certificate spec
under which the Platform
Certificate was issued

SHOULD

Revision 19

minorVersion
revision

20
TCG PUBLISHED

10 April 2020

Field Name

RFC 5755 Type

Value

Field Status

Platform
Configuration

componentIdentifier

Platform components andproperties MAY be reflected bythis attribute

MAY

URIReference

Points to the PCR list

MAY

Certificate
Policies

CertificatePolicies

CertPolicyId
CPSuri
UserNotice

MUST

Subject
Alternative
Names

GeneralName
directoryName

PlatformManufacturerStr
PlatformModel
PlatformVersion
PlatformSerial (optional)
PlatformManufacturerId(optional)

MUST
non-critical

TargetingInformation

TargetingInformation

Additional TPM EK Certificates
not included in Holder. UsetargetName option.

MAY

Authority Key
Id

AuthorityKeyIdentifier

Key identifier
Issuer name and serial number(optional)

MUST

Authority Info
AccessAuthorityInfoAccessSy
ntax

id-ad-caIssuers
URI to issuing CA
id-ad-ocsp (optional)
URI to OCSP responder

SHOULD
non-critical

CRL
Distribution

CRLDistributionPoints

URI to CRL

MAY

Issuer Unique
Id

UniqueIdentifier

Unique value when using ashared issuer nameplatformProperties
platformPropertiesUri

Platform
Configuration
URI
Extensions

683

Non-criticalcriticalnon-critical

non-critical
SHOULD
NOT

Table 3: Attribute Certificate Format Fields

684

3.2.1

685
686
687

This field contains the version of the certificate syntax. Since Platform Certificates always
contain mandatory extensions the version number MUST be set to 2 (which is encoded as thevalue 1 in ASN.1).

VersionCopyright © TCG 2020

TCG Platform Certificate Profile
Specification Version 1.1

688

3.2.2

689
690
691

The serial number MUST be a positive integer which is uniquely assigned to each certificate
by the issuer. The combination of an issuer’s DN and the serial number MUST uniquely
describe a single certificate.

692

Assign a value unique per instance of a TBB amongst all certificates issued by "issuer".

693

3.2.3

694
695
696

This OID identifies the algorithm used by the platform certificate issuer to sign the certificate.
Platform Certificate verifiers MUST support certificates signed with algorithms available in
the TCG Algorithm Registry [12].

697

3.2.4

698
699
700
701

This field contains a reference to one of the required X.509 TPM EK certificates. The
BaseCertificateID choice MUST be used. Additional required TPM EK certificates MUST be
referenced using the TargetingInformation extension. Optional EK certificates MAY be
referenced using the TargetingInformation extension.

702
703

NOTE: This specification does not stipulate the order in which the EK certificate referencesmust appear in the Platform Certificate. Certificates will appear in any order.

704

3.2.5

705
706
707

This field contains the distinguished name of the entity that issued this Platform Certificate.
This is the entity that asserts that the platform incorporates a TPM and RTM in a mannerthat conforms to the relevant TCG Platform Specific specification.

708

3.2.6

709
710
711
712
713
714

This field contains the period during which the binding between the attributes and TPM EK
certificates is considered valid. It is represented by two date values named notBefore andnotAfter. Issuers SHOULD assign notBefore to the current time when the certificate is issued
and notAfter to the last date that the certificate will be considered valid. Both notBefore andnotAfter MUST use the appropriate time format as indicated by RFC 5755 [11], section 4.2.6
Validity Period.

715

3.2.7

716

This extension indicates policy terms under which the certificate was issued.

717
718
719
720

Assign “critical” the value FALSE. Assign policyIdentifier at least one object identifier.
Assign the cPSuri policy qualifier the value of an HTTP URL at which a plain language versionof the platform endorsement entity’s certificate policy could be obtained. Assign the explicit
text userNotice policy qualifier the value “TCG Trusted Platform Endorsement”.

721
722

During certificate path validation, check that at least one acceptable policyIdentifier
value is present.

Serial Number

Signature Algorithm

HolderIssuerValidity

Certificate Policies

Revision 19

22
TCG PUBLISHED

10 April 2020

723

3.2.8

724
725
726
727
728

This extension contains the alternative name of the entity associated with this certificate.
Assign "critical" the value FALSE. Include the platform model, using the directory name-form
with RDNs for the platform manufacturer, model, version number, and optionally, the serial
number, and manufacturer ID. The “Platform Manufacturer Identifier” optional field uniquely
identifies the platform’s manufacturer using the IANA Private Enterprise Number OID [8].

729
730

During certificate validation, the Privacy-CA MUST check that the platform manufacturer,
model, version, serial numbers, and manufacturer ID are acceptable.

731

3.2.9

732
733
734
735
736
737

This extension contains references to additional EK certificates not included in the Holder
field. This extension is implemented using AC Targeting extension defined in RFC5755 [11].
This extension is OPTIONAL, but if included, assign “critical” the value of TRUE. Use thetargetName option. The EK certificate serial number MUST be included by adding the RDN
attribute serialNumber to the GeneralName. Attribute serialNumber is defined in ITU-T X.520
specification [19].

738

3.2.10739

The following attributes SHOULD be included:

Subject Alternative Names

Targeting Information

Attributes

740
741
742

•

The “TCG Platform Specification” attribute references the platform class, version andrevision level of the TCG platform-specific specification to which the platform wasdesigned.

743•

The “TCG Certificate Type” attribute identifies the type of certificate and its format.

744
745

•

The “TCG Certificate Specification” attribute references the version, level, and revisionof this specification.

746
747

•

The platform “TBB Security Assertions” attribute describes various assertions about
the security properties of the TBB of the platform.

748

The following attributes MAY be included:

749
750
751

•

The “Platform Configuration” attribute describes various assertions of platform
properties that are not security related. Including CPU and motherboard serial
numbers, network adapter MAC addresses.

752
753

•

The “Platform Configuration Uri” attribute which provides the URI to the manufacturer
published list of valid PCR values.

754
755

The following attributes are documented for compatibility with previous published TCG orTCPA specifications but SHOULD NOT be included in Platform Certificates:

756
757

•

The "TCPA Specification Version" attribute, with field values correctly reflecting thehighest version of the TCG specification with which the TPM implementation conforms.

758
759

•

If the TPM has been successfully evaluated against a Common Criteria protection
profile, then include the TPM protection profile identifier attribute.

760
761

•

If the TPM has been successfully evaluated against a Common Criteria security target,then include the TPM security target identifier attribute.

Copyright © TCG 2020

TCG Platform Certificate Profile
Specification Version 1.1

762
763
764

•

If the RTM and the means by which the TPM and RTM have been incorporated into theplatform have been successfully evaluated against a Common Criteria protection
profile, then include the "TBB protection profile" identifier attribute.

765
766
767

•

If the RTM and the means by which the TPM and RTM have been incorporated into theplatform have been successfully evaluated against a Common Criteria security target,then include the "TBB security target" identifier attribute.

768
769

•

Optionally, include the "security qualities" attribute with a text string reflecting thesecurity qualities of the platform.

770

3.2.11

771
772
773

This extension identifies the subject public key of the certificate issuer. Assign “critical” thevalue FALSE. Assign the value of “subject key identifier” from the issuer’s public-key
certificate, if available, else omit.

774

3.2.12

775
776
777
778

This extension contains additional information about the issuer. Assign “critical” the value
FALSE. It MAY be omitted. If included, then the accessMethod OID SHOULD be set to id-adocsp (RFC 5755 [11]) and the accessLocation value SHOULD point to the access value of the
OCSP responder (HTTP URI).

779
780
781
782

The relying party can access the certificate status for this certificate by sending a properly
formatted OCSPRequest to the URI. If both a CRL Distribution Point (CDP) and OCSP AIA
extension are present in the certificate, then the relying parties SHOULD use OCSP as theprimary validation mechanism.

783

3.2.13

784
785
786
787

This extension provides the location of the subject’s revocation information. Assign “critical”
the value FALSE. The relying party can access the CRL for this certificate from this URI. If
both a CDP and OCSP AIA extension are present in the certificate, then relying parties
SHOULD use OCSP as the primary validation mechanism.

788

3.2.14

789
790

These fields uniquely identify certificates which share names with other certificates issued by
the same issuer. These fields MUST be omitted.

791

3.3

792
793
794

This section contains the format for a Delta Platform Certificate. The Delta Platform Certificate
makes the assertions listed in section 2.2.6. This certificate format adheres to RFC 5755 [11]and all requirements and limitations from that specification apply unless otherwise noted.

795
796
797

NOTE: some fields are assigned a value even though the certificate user performs no action
with that value. In such cases, the intention is to inhibit non-TCG implementations frommaking inappropriate use of the certificate.

Authority Key Identifier

Authority Info Access

CRL Distribution

Issuer Unique Id

Delta Platform Certificate

Revision 19

24
TCG PUBLISHED

10 April 2020

Field Name

RFC 5755 Type

Value

Field Status

VersionINTEGERV2 (encoded as value 1)

Standard

Serial Number

INTEGER

Positive integer value uniquerelative to the issuer

Standard

Signature
Algorithm

AlgorithmIdentifier

Algorithm used by the issuer
to sign this certificate

Standard

HolderHolderIdentity of the associated base
Platform/Delta Platform
Certificate, use
BaseCertificateID.

Standard

IssuerNameDistinguished name of thedelta platform certificate
issuerStandard

Validity

notBefore
notAfter

Beginning and end of validity
periodStandard

Attributes

Standard

TCG Certificate
TypecredentialType

Identifies the Delta Platform
Certificate

MUST

TCG Certificate
Specification

majorVersion

Major, minor, and revision of
the Platform Certificate spec
under which this certificate
was issued

MAY (If
different frombase Platform
Certificate)platformPropertiesUri

Changes to platform
components and properties
MAY be reflected by this
attribute

MAY (If
different frombase Platform
Certificate)

URIReference

Points to the PCR list

MAY (If
different frombase Platform
Certificate)

CertificatePolicies

CertPolicyId
CPSuri
UserNotice

MUST

minorVersion
revision

Platform
Configuration

Platform
Configuration
URI

componentIdentifier
platformProperties

Extensions
Certificate
Policies

Non-critical

Copyright © TCG 2020

TCG Platform Certificate Profile
Specification Version 1.1

Field Name

RFC 5755 Type

Value

Field Status

Subject
Alternative
Names

GeneralName
directoryName

PlatformManufacturerStr
PlatformModel
PlatformVersion
PlatformSerial (optional)
PlatformManufacturerId(optional)

MUST
non-critical

TargetingInformation

TargetingInformation

TPM EK Certificates issued
and not included in basecertificate. Use targetName
option.

MAY

Authority Key Id

AuthorityKeyIdentifier

Key identifier
Issuer name and serial
number (optional)

MUST(Must notdiffer frombase Platform
Certificate)criticalnon-critical

Authority Info
AccessAuthorityInfoAccessSy
ntax

id-ad-caIssuers
URI to issuing CA
id-ad-ocsp (optional)
URI to OCSP responder

SHOULD
non-critical

CRL Distribution

CRLDistributionPoints

URI to CRL

MAY

798

non-critical

Table 4: Delta Attribute Certificate Format Fields

799

3.3.1

800
801

This field contains the version of the certificate syntax. The Delta Platform Certificate version
number MUST be set to 2 (which is encoded as the value 1 in ASN.1).

802

3.3.2

803
804
805

The serial number MUST be a positive integer which is uniquely assigned to each certificate
by the issuer. The combination of an issuer’s DN and the serial number MUST uniquely
describe a single certificate.

806

Assign a value unique per instance amongst all certificates issued by "issuer".

807

3.3.3

808
809
810

This OID identifies the algorithm used by the Delta Platform Certificate issuer to sign thecertificate. Delta Platform Certificate verifiers MUST support certificates signed withalgorithms available in the TCG Algorithm Registry [12].

811

3.3.4

812
813

This field contains a reference to the base Platform Certificate or base Delta Platform
Certificate. The BaseCertificateID choice MUST be used.

Version

Serial Number

Signature Algorithm

HolderRevision 19

26
TCG PUBLISHED

10 April 2020

814

3.3.5

815
816
817
818

This field contains the distinguished name of the entity that issued this Delta Platform
Certificate. This is the entity that asserts that the changes made to the platform are correctlyreflected in this certificate, and that it references the appropriate base Platform or Delta
Certificate.

819

3.3.6

820
821
822
823
824
825

This field contains the period during which the assertions made by the issuer about theplatform are considered valid. Issuers SHOULD assign notBefore to the current time when
the certificate is issued and notAfter to the last date that the certificate will be consideredvalid. The notAfter date SHOULD not precede that of the base certificate. Both notBefore andnotAfter MUST use the appropriate time format as indicated by RFC 5755 [11], section 4.2.6
Validity Period.

826

3.3.7

827

This extension indicates policy terms under which the certificate was issued.

828
829
830
831

Assign “critical” the value FALSE. Assign policyIdentifier at least one object identifier. Assign
the cPSuri policy qualifier the value of an HTTP URL at which a plain language version of theplatform endorsement entity’s certificate policy could be obtained. Assign the explicit text
userNotice policy qualifier the value “TCG Trusted Platform Endorsement”.

832
833

During certificate path validation, check that at least one acceptable policyIdentifier value ispresent.

834

3.3.8

835
836
837
838
839
840

This extension contains the platform name attributes. This extension MUST equal that of thebase Platform or Delta Platform Certificate, the issuer MUST NOT introduce any changes.
Assign "critical" the value FALSE. Include the platform model, using the directory name-form
with RDNs for the platform manufacturer, model, version number, and optionally, the serial
number, and manufacturer ID. The “Platform Manufacturer Identifier” optional field uniquely
identifies the platform’s manufacturer using the IANA Private Enterprise Number OID [8].

841
842

During certificate validation, the Privacy-CA MUST check that the platform manufacturer,
model, version, serial numbers, and manufacturer ID are acceptable.

843

3.3.9

844
845

This extension contains references to additional EK certificates issued by the Delta Platform
Certificate issuer. Refer to section 3.2.9 for details on how to implement this extension.

846

3.3.10847

The following attributes SHOULD be included:

IssuerValidity

Certificate Policies

Subject Alternative Names

Targeting Information

Attributes

848•

The “TCG Certificate Type” attribute identifies the type of certificate and its format.

849
850

•

The “TCG Certificate Specification” attribute references the version, level, and revisionof this specification.

851

The following attributes MAY be included:

Copyright © TCG 2020

TCG Platform Certificate Profile
Specification Version 1.1

852
853
854

•

The “Platform Configuration” attribute describes various assertions of platform
properties that are not security related, including CPU and motherboard serial
numbers, and network adapter MAC addresses.

855
856

•

The “Platform Configuration Uri” attribute which provides the URI to the manufacturer
published list of valid PCR values.

857

3.3.11

858
859
860

This extension identifies the subject public key of the certificate issuer. Assign “critical” thevalue FALSE. Assign the value of “subject key identifier” from the issuer’s public-key
certificate, if available, else omit.

861

3.3.12

862
863
864
865

This extension contains additional information about the issuer. Assign “critical” the value
FALSE. This extension MAY be omitted. If included, then the accessMethod OID SHOULD be
set to id-ad-ocsp (RFC 5755 [11]) and the accessLocation value SHOULD point to the accessvalue of the OCSP responder (HTTP URI).

866
867
868
869

The relying party can access the certificate status for this certificate by sending a properly
formatted OCSPRequest to the URI. If both a CRL Distribution Point (CDP) and OCSP AIA
extension are present in the certificate, then the relying parties SHOULD use OCSP as theprimary validation mechanism.

870

3.3.13

871
872
873
874

This extension provides the location of the subject’s revocation information. Assign “critical”
the value FALSE. The relying party can access the CRL for this certificate from this URI. If
both a CDP and OCSP AIA extension are present in the certificate, then relying parties
SHOULD use OCSP as the primary validation mechanism.

875

3.3.14876
877

These fields uniquely identify certificates which share names with other certificates issued by
the same issuer. These fields MUST be omitted.

Authority Key Identifier

Authority Info Access

CRL Distribution

Issuer Unique Id

Revision 19

28
TCG PUBLISHED

10 April 2020

878

4. X.509 ASN.1 Structures and OIDs

879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944

TCG has registered an object identifier (OID) namespace as an “international body” in the ISO
registration hierarchy. This leads to shorter OIDs and gives TCG the ability to manage its own
namespace. The OID namespace is inherited from TCPA specifications. These definitions areintended to be used within the context of an X.509 v3 certificate specifically leveraging the
profile described in RFC 5755.
-- TCG specific OIDs
tcg OBJECT IDENTIFIER ::= {joint-iso-itu-t(2) international-organizations(23) tcg(133) }tcg-tcpaSpecVersion OBJECT IDENTIFIER ::= {tcg 1}
tcg-attribute OBJECT IDENTIFIER ::= {tcg 2}
tcg-protocol OBJECT IDENTIFIER ::= {tcg 3}
tcg-algorithm OBJECT IDENTIFIER ::= {tcg 4}
tcg-platformClass OBJECT IDENTIFIER ::= {tcg 5}
tcg-ce OBJECT IDENTIFIER ::= {tcg 6}
tcg-kp OBJECT IDENTIFIER ::= {tcg 8}
tcg-address OBJECT IDENTIFIER ::= {tcg 17}
tcg-registry OBJECT IDENTIFIER ::= {tcg 18}-- TCG Attribute OIDs
tcg-at-tpmManufacturer OBJECT IDENTIFIER ::= {tcg-attribute 1}
tcg-at-tpmModel OBJECT IDENTIFIER ::= {tcg-attribute 2}
tcg-at-tpmVersion OBJECT IDENTIFIER ::= {tcg-attribute 3}
tcg-at-securityQualities OBJECT IDENTIFIER ::= {tcg-attribute 10}
tcg-at-tpmProtectionProfile OBJECT IDENTIFIER ::= {tcg-attribute 11}
tcg-at-tpmSecurityTarget OBJECT IDENTIFIER ::= {tcg-attribute 12}
tcg-at-tbbProtectionProfile OBJECT IDENTIFIER ::= {tcg-attribute 13}
tcg-at-tbbSecurityTarget OBJECT IDENTIFIER ::= {tcg-attribute 14}
tcg-at-tpmIdLabel OBJECT IDENTIFIER ::= {tcg-attribute 15}
tcg-at-tpmSpecification OBJECT IDENTIFIER ::= {tcg-attribute 16}
tcg-at-tcgPlatformSpecification OBJECT IDENTIFIER ::= {tcg-attribute 17}
tcg-at-tpmSecurityAssertions OBJECT IDENTIFIER ::= {tcg-attribute 18}
tcg-at-tbbSecurityAssertions OBJECT IDENTIFIER ::= {tcg-attribute 19}
tcg-at-tcgCredentialSpecification OBJECT IDENTIFIER ::= {tcg-attribute 23}
tcg-at-tcgCredentialType OBJECT IDENTIFIER ::= {tcg-attribute 25}-- TCG Platform Class Common OIDs
tcg-common OBJECT IDENTIFIER ::= { tcg-platformClass 1}-- TCG Common Attribute OIDs
tcg-at-platformManufacturerStr OBJECT IDENTIFIER ::= {tcg-common 1}
tcg-at-platformManufacturerId OBJECT IDENTIFIER ::= {tcg-common 2}
tcg-at-platformConfigUri OBJECT IDENTIFIER ::= {tcg-common 3}
tcg-at-platformModel OBJECT IDENTIFIER ::= {tcg-common 4}
tcg-at-platformVersion OBJECT IDENTIFIER ::= {tcg-common 5}
tcg-at-platformSerial OBJECT IDENTIFIER ::= { tcg-common 6}
tcg-at-platformConfiguration OBJECT IDENTIFIER ::= {tcg-common 7}-- TCG Platform Configuration OIDs
tcg-at-platformConfiguration-v1 OBJECT IDENTIFIER ::= {tcg-at-platformConfiguration 1}
tcg-at-platformConfiguration-v2 OBJECT IDENTIFIER ::= {tcg-at-platformConfiguration 2}-- TCG Algorithm OIDs
tcg-algorithm-null OBJECT IDENTIFIER ::= {tcg-algorithm 1}-- TCG Key Purposes OIDs
tcg-kp-EKCertificate OBJECT IDENTIFIER ::= {tcg-kp 1}
tcg-kp-PlatformAttributeCertificate OBJECT IDENTIFIER ::= {tcg-kp 2}
tcg-kp-AIKCertificate OBJECT IDENTIFIER ::= {tcg-kp 3}
tcg-kp-PlatformKeyCertificate OBJECT IDENTIFIER ::= {tcg-kp 4}
tcg-kp-DeltaPlatformAttributeCertificate OBJECT IDENTIFIER ::= {tcg-kp 5}-- TCG Certificate Extensions
tcg-ce-relevantCredentials OBJECT IDENTIFIER ::= {tcg-ce 2}

Copyright © TCG 2020

945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
1013
1014
1015

TCG Platform Certificate Profile
Specification Version 1.1

tcg-ce-relevantManifests OBJECT IDENTIFIER ::= {tcg-ce 3}
tcg-ce-virtualPlatformAttestationService OBJECT IDENTIFIER ::= {tcg-ce 4}
tcg-ce-migrationControllerAttestationService OBJECT IDENTIFIER ::= (tcg-ce 5}
tcg-ce-migrationControllerRegistrationService OBJECT IDENTIFIER ::= (tcg-ce 6}
tcg-ce-virtualPlatformBackupService OBJECT IDENTIFIER ::= (tcg-ce 7}-- TCG Protocol OIDs
tcg-prt-tpmIdProtocol OBJECT IDENTIFIER ::= {tcg-protocol 1}-- TCG Address OIDs
tcg-address-ethernetmac OBJECT IDENTIFIER ::= {tcg-address 1}
tcg-address-wlanmac OBJECT IDENTIFIER ::= {tcg-address 2}
tcg-address-bluetoothmac OBJECT IDENTIFIER ::= {tcg-address 3}-- TCG Registry OIDs
tcg-registry-componentClass OBJECT IDENTIFIER ::= {tcg-registry 3}
tcg-registry-componentClass-tcg OBJECT IDENTIFIER ::= {tcg-registry-componentClass 1}
tcg-registry-componentClass-ietf OBJECT IDENTIFIER ::= {tcg-registry-componentClass 2}
tcg-registry-componentClass-dmtf OBJECT IDENTIFIER ::= {tcg-registry-componentClass 3}-- tcg specification attributes for platform
tCGPlatformSpecification ATTRIBUTE ::= {WITH SYNTAX TCGPlatformSpecification
ID tcg-at-tcgPlatformSpecification }TCGSpecificationVersion ::= SEQUENCE {majorVersion INTEGER,
minorVersion INTEGER,
revision INTEGER }TCGPlatformSpecification ::= SEQUENCE {Version TCGSpecificationVersion,
platformClass OCTET STRING SIZE(4) }-- TCG Credential type attributetCGCredentialType ATTRIBUTE ::= {WITH SYNTAX TCGCredentialType
ID tcg-at-tcgCredentialType}TCGCredentialType::= SEQUENCE {certificateType CredentialType}
CredentialType::=
OBJECT
IDENTIFIER
DeltaPlatformAttributeCertificate )(tcg-kp-PlatformAttributeCertificate|

tcg-kp--- manufacturer implementation model and version attributes
PlatformManufacturerStr ATTRIBUTE ::= {WITH SYNTAX UTF8String (SIZE (1..STRMAX))
ID tcg-at-platformManufacturerStr }PlatformModel ATTRIBUTE ::= {WITH SYNTAX UTF8String (SIZE (1..STRMAX))
ID tcg-at-platformModel }PlatformVersion ATTRIBUTE ::= {WITH SYNTAX UTF8String (SIZE (1..STRMAX))
ID tcg-at-platformVersion }PlatformSerial ATTRIBUTE ::= {WITH SYNTAX UTF8String (SIZE (1..STRMAX))
ID tcg-at-platformSerial }PlatformManufacturerId ATTRIBUTE ::= {WITH SYNTAX ManufacturerId
ID tcg-at-platformManufacturerId}
ManufacturerId ::= SEQUENCE {manufacturerIdentifier
PrivateEnterpriseNumber}

Revision 19

30
TCG PUBLISHED

10 April 2020

1016
1017
1018
1019
1020
1021
1022
1023
1024
1025
1026
1027
1028
1029
1030
1031
1032
1033
1034
1035
1036
1037
1038
1039
1040
1041
1042
1043
1044
1045
1046
1047
1048
1049
1050
1051
1052
1053
1054
1055
1056
1057
1058
1059
1060
1061
1062
1063
1064
1065
1066
1067
1068
1069
1070
1071
1072
1073
1074
1075
1076
1077
1078
1079
1080
1081
1082
1083
1084
1085
1086

enterprise OBJECT IDENTIFIER :: = {iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1)}PrivateEnterpriseNumber OBJECT IDENTIFIER :: = { enterprise private-enterprise-number }-- platform tbb security assertions
tBBSecurityAssertions ATTRIBUTE ::= {WITH SYNTAX TBBSecurityAssertions
ID tcg-at-tbbSecurityAssertions }TBBSecurityAssertions ::= SEQUENCE {version Version DEFAULT v1,
ccInfo [0] IMPLICIT CommonCriteriaMeasures OPTIONAL,
fipsLevel [1] IMPLICIT FIPSLevel OPTIONAL,
rtmType [2] IMPLICIT MeasurementRootType OPTIONAL,
iso9000Certified BOOLEAN DEFAULT FALSE,
iso9000Uri IA5STRING (SIZE (1..URIMAX)) OPTIONAL }-- Hybrid means the measurement root is capable of static AND dynamic-- Physical means that the root is anchored by a physical TPM-- Virtual means the TPM is virtualized (possibly running in a VMM)-- TPMs or RTMs might leverage other lower layer RTMs to virtualize the-- the capabilities of the platform.
MeasurementRootType ::= ENUMERATED {static (0),dynamic (1),nonHost (2),hybrid (3),physical (4),virtual (5) }-- common criteria evaluation
CommonCriteriaMeasures ::= SEQUENCE {version IA5STRING (SIZE (1..STRMAX)), -- “2.2” or “3.1”; future syntax defined by CC
assurancelevel EvaluationAssuranceLevel,
evaluationStatus EvalutionStatus,
plus BOOLEAN DEFAULT FALSE,
strengthOfFunction [0] IMPLICIT StrengthOfFunction OPTIONAL,
profileOid [1] IMPLICIT OBJECT IDENTIFIER OPTIONAL,
profileUri [2] IMPLICIT URIReference OPTIONAL,
targetOid [3] IMPLICIT OBJECT IDENTIFIER OPTIONAL,
targetUri [4] IMPLICIT URIReference OPTIONAL }EvaluationAssuranceLevel ::= ENUMERATED {levell (1),level2 (2),level3 (3),level4 (4),level5 (5),level6 (6),level7 (7) }StrengthOfFunction ::= ENUMERATED {basic (0),medium (1),high (2) }URIReference ::= SEQUENCE {uniformResourceIdentifier IA5String (SIZE (1..URIMAX)),
hashAlgorithm AlgorithmIdentifier OPTIONAL,
hashValue BIT STRING OPTIONAL }EvaluationStatus ::= ENUMERATED {designedToMeet (0),evaluationInProgress (1),Copyright © TCG 2020

1087
1088
1089
1090
1091
1092
1093
1094
1095
1096
1097
1098
1099
1100
1101
1102
1103
1104
1105
1106
1107
1108
1109
1110
1111
1112
1113
1114
1115
1116
1117
1118
1119
1120
1121
1122
1123
1124
1125
1126
1127
1128
1129
1130
1131
1132
1133
1134
1135
1136
1137
1138
1139
1140
1141
1142
1143
1144
1145
1146
1147
1148
1149
1150
1151
1152
1153
1154
1155
1156
1157

TCG Platform Certificate Profile
Specification Version 1.1

evaluationCompleted (2) }-- fips evaluation
FIPSLevel ::= SEQUENCE {version IA5STRING (SIZE (1..STRMAX)), -- “140-1”, “140-2”, or “140-3”level SecurityLevel,plus BOOLEAN DEFAULT FALSE }SecurityLevel ::= ENUMERATED {level1 (1),level2 (2),level3 (3),level4 (4) }-- platform configuration
platformConfiguration ATTRIBUTE ::= {WITH SYNTAX PlatformConfiguration
ID tcg-at-platformConfiguration-v2}
PlatformConfiguration ::= SEQUENCE {componentIdentifiers [0] IMPLICIT SEQUENCE(SIZE(1..MAX)) OF ComponentIdentifier OPTIONAL,
componentIdentifiersUri [1] IMPLICIT URIReference OPTIONAL,
platformProperties [2] IMPLICIT SEQUENCE(SIZE(1..MAX)) OF Properties OPTIONAL,
platformPropertiesUri [3] IMPLICIT URIReference OPTIONAL}
ComponentIdentifier ::= SEQUENCE {componentClass ComponentClass,componentManufacturer UTF8String (SIZE (1..STRMAX)),
componentModel UTF8String (SIZE (1..STRMAX)),
componentSerial[0] IMPLICIT UTF8String (SIZE (1..STRMAX)) OPTIONAL,
componentRevision [1] IMPLICIT UTF8String (SIZE (1..STRMAX)) OPTIONAL,
componentManufacturerId [2] IMPLICIT PrivateEnterpriseNumber OPTIONAL,
fieldReplaceable [3] IMPLICIT BOOLEAN OPTIONAL,
componentAddresses [4] IMPLICIT SEQUENCE(SIZE(1.. MAX)) OF ComponentAddresscomponentPlatformCert [5] IMPLICIT CertificateIdentifier OPTIONAL,
componentPlatformCertUri [6] IMPLICIT URIReference OPTIONAL,
status [7] IMPLICIT AttributeStatus OPTIONAL }OPTIONAL

ComponentClass ::= SEQUENCE {componentClassRegistry ComponentClassRegistry,componentClassValue OCTET STRING SIZE(4) }ComponentClassRegistry ::= OBJECT IDENTIFIER ( tcg-registry-componentClass-tcg | tcg-registrycomponentClass-ietf | tcg-registry-componentClass-dmtf )ComponentAddress ::= SEQUENCE {addressType AddressType,addressValue UTF8String (SIZE (1..STRMAX)) }AddressType ::= OBJECT IDENTIFIER (tcg-address-ethernetmac | tcg-address-wlanmac | tcg-addressbluetoothmac)
Properties ::= SEQUENCE {propertyName UTF8String (SIZE (1..STRMAX)),propertyValue UTF8String (SIZE (1..STRMAX)),status [0] IMPLICIT AttributeStatus OPTIONAL}

CertificateIdentifier::= SEQUENCE {attributeCertIdentifier[0] IMPLICIT AttributeCertificateIdentifier
genericCertIdentifier[1] IMPLICIT IssuerSerial
OPTIONAL }OPTIONAL,

AttributeCertificateIdentifier ::= SEQUENCE {hashAlgorithm
AlgorithmIdentifier,hashOverSignatureValue
OCTET STRING}
AttributeStatus ::= ENUMERATED {added (0),Revision 19

32
TCG PUBLISHED

10 April 2020

1158
1159
1160
1161
1162
1163
1164
1165
1166
1167
1168
1169
1170

modified (1),removed (2) }-- platform configuration Uri attribute
PlatformConfigUri ATTRIBUTE ::= {WITH SYNTAX URIReference
ID tcg-at-platformConfigUri }Copyright © TCG 2020

TCG Platform Certificate Profile
Specification Version 1.1

1171

5. References

1172

[1]

TCG Glossary, https://trustedcomputinggroup.org/glossary

1173
1174
1175
1176

[2]

TCG Infrastructure Working Group Reference Architecture for Interoperability (Part1), Specification Version 1.0,
https://trustedcomputinggroup.org/resource/infrastructure-work-group-referencearchitecture-for-interoperability-specification-part-1-version-1-0/

1177
1178

[3]

TCPA Main Specification, Version 1.1b,
http://www.trustedcomputinggroup.org/tcpa-main-specification-version-1-1b/

1179
1180
1181

[4]

Key words for use in RFCs to Indicate Requirement Levels, RFC 2119,
www.ietf.org/rfc/rfc2119.txt
Hypertext Markup Language – 2.0, RFC 1866, www.ietf.org/rfc/rfc1866.txt

1182
1183
1184

[6]

TCG Credential Profiles For TPM Family 1.2 Specification Version 1.2,
http://www.trustedcomputinggroup.org/infrastructure-work-group-tcg-credentialprofiles-specification/

1185
1186

[7]

TCG EK Credential Profile for TPM Family 2.0, Specification Version 2.0,
http://www.trustedcomputinggroup.org/tcg-ek-credential-profile-tpm-family-2-0/

1187
1188

[8]

IANA Private Enterprise Numbers, http://www.iana.org/assignments/enterprisenumbers/enterprise-numbers

1189
1190
1191

[9]

Server Work Group Generic Server Specification, Version 1.0,
http://www.trustedcomputinggroup.org/server-work-group-generic-serverspecification-version-1-0/

1192
1193
1194

[10]

PC Client Platform TPM Profile (PTP) Specification ,http://www.trustedcomputinggroup.org/pc-client-platform-tpm-profile-ptpspecification/

1195
1196

[11]

An Internet Attribute Certificate Profile for Authorization,www.ietf.org/rfc/rfc5755.txt

1197
1198

[12]

TCG Algorithm Registry, http://www.trustedcomputinggroup.org/tcg-algorithmregistry/

1199
1200

[13]

Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List
(CRL) Profile, https://www.ietf.org/rfc/rfc5280.txt

1201
1202

[14]

TCG Platform Attribute Credential Profile Version 1.0,
https://trustedcomputinggroup.org/tcg-platform-attribute-credential-profile/

1203
1204

[15]

Algorithms and Identifiers for the Internet X.509 Public Key Infrastructure Certificate
and Certificate Revocation List (CRL) Profile, https://www.ietf.org/rfc/rfc3279.txt

1205
1206
1207

[16]

Additional Algorithms and Identifiers for RSA Cryptography for use in the Internet
X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL)
Profile, https://www.ietf.org/rfc/rfc4055.txt

1208
1209

[17]

SHA-3 Related Algorithms and Identifiers for PKIX, https://tools.ietf.org/html/draftturner-lamps-adding-sha3-to-pkix-00

1210
1211
1212

[18]

GB/T 33560-2017. Information security technology—Cryptographic application
identifier criterion specification.
http://www.spc.org.cn/gb168/online/GB%252FT%252033560-2017/[5]

Revision 19

34
TCG PUBLISHED

10 April 2020

1213
1214
1215
1216
1217
1218
1219
1220
1221
1222

[19]
[20]

[21]

[22]

A YANG Data Model for Hardware Management. https://tools.ietf.org/html/rfc8348
ITU-T X.520 Information Technology – Open Systems Interconnection – The
Directory: Selected Attributed Types. https://www.itu.int/rec/T-REC-X.520-201610I
TCG PC Client Platform TPM Profile (PTP) Specification.
https://trustedcomputinggroup.org/wpcontent/uploads/TCG_PC_Client_Platform_TPM_Profile_PTP_2.0_r1.03_v22.pdf
TCG Registry of Reserved TPM 2.0 Handles and Localities.
https://trustedcomputinggroup.org/resource/registry/Copyright © TCG 2020

1223
1224
1225
1226
1227
1228
1229
1230
1231
1232
1233
1234
1235
1236
1237
1238
1239
1240
1241
1242
1243
1244
1245
1246
1247
1248
1249
1250
1251
1252
1253
1254
1255
1256
1257
1258
1259
1260
1261

TCG Platform Certificate Profile
Specification Version 1.1

A. Certificate Examples
Example 1 (Platform Certificate in Attribute Certificate Format)
The following section provides an example of a Platform Certificate in Attribute Certificate
format (RFC 5755) [11]. The PEM encoded version of the certificate as well as the ASN.1
certificate text are included for convenience. The values used in this example are forillustrative purposes and must be replaced with manufacturer-specific data.

A.1.1 PEM Format-----BEGIN ATTRIBUTE CERTIFICATE----MIIJmDCCCIACAQEwgZaggZMwgYqkgYcwgYQxCzAJBgNVBAYTAlVTMQswCQYDVQQIDAJDQTEUMBIGA1UEBwwLU2FudGEgQ2xhcmExGjAYBgNVBAoMEUludGVsIENvcnBv
cmF0aW9uMR4wHAYDVQQLDBVFSyBDZXJ0aWZpY2F0ZSBJc3N1ZXIxFjAUBgNVBAMM
DXd3dy5pbnRlbC5jb20CBDdAg3SggZ0wgZqkgZcwgZQxCzAJBgNVBAYTAlVTMQsw
CQYDVQQIDAJDQTEUMBIGA1UEBwwLU2FudGEgQ2xhcmExGjAYBgNVBAoMEUludGVs
IENvcnBvcmF0aW9uMS4wLAYDVQQLDCVQbGF0Zm9ybSBBdHRyaWJ1dGUgQ2VydGlm
aWNhdGUgSXNzdWVyMRYwFAYDVQQDDA13d3cuaW50ZWwuY29tMA0GCSqGSIb3DQEBCwUAAhRgKWfqeST97mzBULkeg3d9H0J5mTAiGA8yMDE3MDgyMDIxMDc0OFoYDzIw
MjAwODIwMjEwNzQ4WjCCBK4wHAYFZ4EFAhExEzARMAkCAQICAQACASsEBAAAAAEw
EgYFZ4EFAhkxCTAHBgVngQUIAjAUBgVngQUCFzELMAkCAQECAQECAQswgccGBWeB
BQITMYG9MIG6AgEAoHQWAzMuMQoBBwoBAgEBAIABAYEFKgMEBQaiLRYraHR0cHM6
Ly93d3cuaW50ZWwuY29tL3Byb3RlY3Rpb25wcm9maWxlLnBkZoMFUwQFBgekJBYi
aHR0cHM6Ly93d3cuaW50ZWwuY29tL2NjdGFyZ2V0LnBkZqENFgUxNDAtMgoBBAEBAIIBAwEBABYqaHR0cHM6Ly93d3cuaW50ZWwuY29tL2lzb2NlcnRpZmljYXRpb24u
cGRmMIIDagYHZ4EFBQEHAjGCA10wggNZoIIC1zCCAXYwDgYGZ4EFEgMBBAQAAAAKDAdBQkMgT0VNDAxXUjA2WDc4NzFGVEyACUE1NTU1LTk5OYEDMS4xggcrBgEEAYIs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dy54eXouY29tL2NlcnRzLzkzODkyOC5jZXKhLxYtaHR0cHM6Ly93

Revision 19

36
TCG PUBLISHED

10 April 2020

1262
1263
1264
1265
1266
1267
1268
1269
1270
1271
1272
1273
1274
1275
1276
1277
1278
1279
1280
1281
1282
1283
1284
1285

d3cuaW50ZWwuY29tL3BsYXRmb3JtaWRlbnRpZmllcnMueG1sohswDAwEdlBybwwE

1286
1287
1288
1289
1290
1291
1292
1293
1294
1295
1296
1297
1298
1299
1300
1301
1302
1303
1304
1305
1306
1307
1308

A.1.2 DER Format
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i2JPfkbS+v2TmBf0sIUPdPfU/aH16NPctavfiEvpPl1uWGty7/oY
8sAq5ChEU3/KbI0zaY7X0Yjpcp5YfYqZZFqgrDmye+o5T5+sAnJOjNrHdIEUGyYH
G47IsogmJj7i1lRcF7JVCJTUOGQpWqVMKF3/VffWJ84XKE+nbTYCYufyYHRxUQ1T
rSx5sQn0dAnW8Bdljc+zpaNJBDxdlCdhKefZSwf3Yc550d3QDqMekH/3++9MJhJO
79BiL0CkXi5gAYLi5NUl4X9S/Jv+hcaDWi/gEtB5s7c3rtEyoYByj//QycQhxMIb
L2ciOd1FDte7CSyC-----END ATTRIBUTE CERTIFICATE-----

SEQUENCE :SEQUENCE :INTEGER : 1
SEQUENCE :CONTEXT SPECIFIC (0) :SEQUENCE :CONTEXT SPECIFIC (4) :SEQUENCE :SET :SEQUENCE :OBJECT IDENTIFIER : countryName [2.5.4.6]
PRINTABLE STRING : 'US'SET :SEQUENCE :OBJECT IDENTIFIER : stateOrProvinceName [2.5.4.8]
UTF8 STRING : 'CA'SET :SEQUENCE :OBJECT IDENTIFIER : localityName [2.5.4.7]
UTF8 STRING : 'Santa Clara'
SET :Copyright © TCG 2020

1309
1310
1311
1312
1313
1314
1315
1316
1317
1318
1319
1320
1321
1322
1323
1324
1325
1326
1327
1328
1329
1330
1331
1332
1333
1334
1335
1336
1337
1338
1339
1340
1341
1342
1343
1344
1345
1346
1347
1348
1349
1350
1351
1352
1353
1354
1355
1356
1357
1358
1359
1360
1361
1362
1363
1364
1365
1366
1367
1368
1369
1370
1371

TCG Platform Certificate Profile
Specification Version 1.1

SEQUENCE :OBJECT IDENTIFIER : organizationName [2.5.4.10]
UTF8 STRING : 'Intel Corporation'SET :SEQUENCE :OBJECT IDENTIFIER : organizationalUnitName [2.5.4.11]
UTF8 STRING : 'EK Certificate Issuer'
SET :SEQUENCE :OBJECT IDENTIFIER : commonName [2.5.4.3]
UTF8 STRING : 'www.intel.com'
INTEGER : 926974836
CONTEXT SPECIFIC (0) :SEQUENCE :CONTEXT SPECIFIC (4) :SEQUENCE :SET :SEQUENCE :OBJECT IDENTIFIER : countryName [2.5.4.6]
PRINTABLE STRING : 'US'SET :SEQUENCE :OBJECT IDENTIFIER : stateOrProvinceName [2.5.4.8]
UTF8 STRING : 'CA'SET :SEQUENCE :OBJECT IDENTIFIER : localityName [2.5.4.7]
UTF8 STRING : 'Santa Clara'SET :SEQUENCE :OBJECT IDENTIFIER : organizationName [2.5.4.10]
UTF8 STRING : 'Intel Corporation'SET :SEQUENCE :OBJECT IDENTIFIER : organizationalUnitName [2.5.4.11]
UTF8 STRING : 'Platform Attribute Certificate Issuer'
SET :SEQUENCE :OBJECT IDENTIFIER : commonName [2.5.4.3]
UTF8 STRING : 'www.intel.com'
SEQUENCE :OBJECT IDENTIFIER : [1.2.840.113549.1.1.11]
NULL :INTEGER : 602967EA7924FDEE6CC150B91E83777D1F427999
SEQUENCE :GENERALIZED TIME : '20170820210748Z'
GENERALIZED TIME : '20200820210748Z'
SEQUENCE :SEQUENCE :OBJECT IDENTIFIER : [2.23.133.2.17]
SET :SEQUENCE :SEQUENCE :INTEGER : 2
INTEGER : 0
INTEGER : 43
OCTET STRING : 00000001
SEQUENCE :OBJECT IDENTIFIER : [2.23.133.2.25]
SET :SEQUENCE :OBJECT IDENTIFIER : [2.23.133.8.2]
SEQUENCE :Revision 19

38
TCG PUBLISHED

10 April 2020

1372
1373
1374
1375
1376
1377
1378
1379
1380
1381
1382
1383
1384
1385
1386
1387
1388
1389
1390
1391
1392
1393
1394
1395
1396
1397
1398
1399
1400
1401
1402
1403
1404
1405
1406
1407
1408
1409
1410
1411
1412
1413
1414
1415
1416
1417
1418
1419
1420
1421
1422
1423
1424
1425
1426
1427
1428
1429
1430
1431
1432
1433
1434

OBJECT IDENTIFIER : [2.23.133.2.23]
SET :SEQUENCE :INTEGER : 1
INTEGER : 1
INTEGER : 11
SEQUENCE :OBJECT IDENTIFIER : [2.23.133.2.19]
SET :SEQUENCE :INTEGER : 0
CONTEXT SPECIFIC (0) :IA5 STRING : '3.1'
ENUMERATED : '07'
ENUMERATED : '02'
BOOLEAN : '00'
CONTEXT SPECIFIC (0) : 01
CONTEXT SPECIFIC (1) : 2A03040506
CONTEXT SPECIFIC (2) :IA5 STRING : 'https://www.intel.com/protectionprofile.pdf'
CONTEXT SPECIFIC (3) : 5304050607
CONTEXT SPECIFIC (4) :IA5 STRING : 'https://www.intel.com/cctarget.pdf'
CONTEXT SPECIFIC (1) :IA5 STRING : '140-2'
ENUMERATED : '04'
BOOLEAN : '00'
CONTEXT SPECIFIC (2) : 03
BOOLEAN : '00'
IA5 STRING : 'https://www.intel.com/isocertification.pdf'
SEQUENCE :OBJECT IDENTIFIER : [2.23.133.5.1.7.2]
SET :SEQUENCE :CONTEXT SPECIFIC (0) :SEQUENCE :SEQUENCE :OBJECT IDENTIFIER : [2.23.133.18.3.1]
OCTET STRING : 0000000A
UTF8 STRING : 'ABC OEM'UTF8 STRING : 'WR06X7871FTL'
CONTEXT SPECIFIC (0) : 41353535352D393939
CONTEXT SPECIFIC (1) : 312E31
CONTEXT SPECIFIC (2) : 2B06010401822C
CONTEXT SPECIFIC (3) : FF
CONTEXT SPECIFIC (4) :SEQUENCE :OBJECT IDENTIFIER : [2.23.133.17.1]
UTF8 STRING : 'AF:3A:94:10:A5'
SEQUENCE :OBJECT IDENTIFIER : [2.23.133.17.2]
UTF8 STRING : 'AF:37:10:D2:A8'
CONTEXT SPECIFIC (5) :CONTEXT SPECIFIC (0) :SEQUENCE :OBJECT IDENTIFIER : [1.3.6.1.4.1.22554.1.2.1]
OCTET STRING :6003A33432FD914B6003A33432FD914B6003A33432FD914B6003A33432FD914B
CONTEXT SPECIFIC (1) :SEQUENCE :CONTEXT SPECIFIC (4) :SEQUENCE :SET :Copyright © TCG 2020

1435
1436
1437
1438
1439
1440
1441
1442
1443
1444
1445
1446
1447
1448
1449
1450
1451
1452
1453
1454
1455
1456
1457
1458
1459
1460
1461
1462
1463
1464
1465
1466
1467
1468
1469
1470
1471
1472
1473
1474
1475
1476
1477
1478
1479
1480
1481
1482
1483
1484
1485
1486
1487
1488
1489
1490
1491
1492
1493
1494
1495
1496
1497

TCG Platform Certificate Profile
Specification Version 1.1
SEQUENCE :OBJECT IDENTIFIER : countryName [2.5.4.6]
PRINTABLE STRING : 'US'SET :SEQUENCE :OBJECT IDENTIFIER : stateOrProvinceName[2.5.4.8]
UTF8 STRING : 'FL'SET :SEQUENCE :OBJECT IDENTIFIER : localityName [2.5.4.7]
UTF8 STRING : 'Ft. Lauderdale'SET :SEQUENCE :OBJECT IDENTIFIER : organizationName[2.5.4.10]
UTF8 STRING : 'ABC Corporation'SET :SEQUENCE :OBJECT IDENTIFIER : organizationalUnitName[2.5.4.11]
UTF8 STRING : 'Platform Certificate Issuer'
SET :SEQUENCE :OBJECT IDENTIFIER : commonName [2.5.4.3]
UTF8 STRING : 'www.abc.com'
INTEGER : 43843898843
CONTEXT SPECIFIC (6) :IA5 STRING : 'https://www.abc.com/certs/43843898843.cer'
SEQUENCE :SEQUENCE :OBJECT IDENTIFIER : [2.23.133.18.3.1]
OCTET STRING : 0000002F
UTF8 STRING : 'XYZ OEM'UTF8 STRING : 'LMBT3904DW1T1G'
CONTEXT SPECIFIC (0) : 43353535352D353535
CONTEXT SPECIFIC (1) : 332E31
CONTEXT SPECIFIC (2) : 2B06010401822C
CONTEXT SPECIFIC (3) : 00
CONTEXT SPECIFIC (4) :SEQUENCE :OBJECT IDENTIFIER : [2.23.133.17.1]
UTF8 STRING : '82:89:FA:D3:61'
SEQUENCE :OBJECT IDENTIFIER : [2.23.133.17.2]
UTF8 STRING : 'D4:83:B4:F2:78'
CONTEXT SPECIFIC (5) :CONTEXT SPECIFIC (0) :SEQUENCE :OBJECT IDENTIFIER : [1.3.6.1.4.1.22554.1.2.1]
OCTET STRING : 3432E1414B60973434323432E1414B6097343432
CONTEXT SPECIFIC (1) :SEQUENCE :CONTEXT SPECIFIC (4) :SEQUENCE :SET :SEQUENCE :OBJECT IDENTIFIER : countryName [2.5.4.6]
PRINTABLE STRING : 'US'SET :SEQUENCE :OBJECT IDENTIFIER : stateOrProvinceName[2.5.4.8]

Revision 19

40
TCG PUBLISHED

10 April 2020

1498
1499
1500
1501
1502
1503
1504
1505
1506
1507
1508
1509
1510
1511
1512
1513
1514
1515
1516
1517
1518
1519
1520
1521
1522
1523
1524
1525
1526
1527
1528
1529
1530
1531
1532
1533
1534
1535
1536
1537
1538
1539
1540
1541
1542
1543
1544
1545
1546
1547
1548
1549
1550
1551
1552
1553
1554
1555
1556
1557
1558
1559
1560

UTF8 STRING : 'AZ'SET :SEQUENCE :OBJECT IDENTIFIER : localityName [2.5.4.7]
UTF8 STRING : 'Phoenix'
SET :SEQUENCE :OBJECT IDENTIFIER : organizationName[2.5.4.10]
UTF8 STRING : 'XYC Company'
SET :SEQUENCE :OBJECT IDENTIFIER : organizationalUnitName[2.5.4.11]
UTF8 STRING : 'Platform Certificate Issuer'
SET :SEQUENCE :OBJECT IDENTIFIER : commonName [2.5.4.3]
UTF8 STRING : 'www.xyz.com'
INTEGER : 938928
CONTEXT SPECIFIC (6) :IA5 STRING : 'https://www.xyz.com/certs/938928.cer'
CONTEXT SPECIFIC (1) :IA5 STRING : 'https://www.intel.com/platformidentifiers.xml'
CONTEXT SPECIFIC (2) :SEQUENCE :UTF8 STRING : 'vPro'
UTF8 STRING : 'true'
SEQUENCE :UTF8 STRING : 'AMT'UTF8 STRING : 'true'
CONTEXT SPECIFIC (3) :IA5 STRING : 'https://www.intel.com/platformproperties.xml'
SEQUENCE :OBJECT IDENTIFIER : [2.23.133.5.1.3]
SET :SEQUENCE :IA5 STRING : 'https://www.intel.com/PCRs.xml'
SEQUENCE :SEQUENCE :OBJECT IDENTIFIER : certificatePolicies [2.5.29.32]
OCTET STRING :SEQUENCE :SEQUENCE :OBJECT IDENTIFIER : [1.2.840.113741.1.5.2.4]
SEQUENCE :SEQUENCE :OBJECT IDENTIFIER : cps [1.3.6.1.5.5.7.2.1]
IA5 STRING : 'https://www.intel.com/platcertcps.pdf'
SEQUENCE :OBJECT IDENTIFIER : unotice [1.3.6.1.5.5.7.2.2]
SEQUENCE :UTF8 STRING : 'TCG Trusted Platform Endorsement'
SEQUENCE :OBJECT IDENTIFIER : subjectAltName [2.5.29.17]
OCTET STRING :SEQUENCE :CONTEXT SPECIFIC (4) :SEQUENCE :SET :SEQUENCE :OBJECT IDENTIFIER : [2.23.133.5.1.1]
UTF8 STRING : 'Intel'

Copyright © TCG 2020

1561
1562
1563
1564
1565
1566
1567
1568
1569
1570
1571
1572
1573
1574
1575
1576
1577
1578
1579
1580
1581
1582
1583
1584
1585
1586
1587
1588
1589
1590
1591
1592
1593
1594
1595
1596
1597
1598
1599
1600
1601
1602
1603
1604
1605
1606
1607
1608
1609
1610
1611
1612
1613
1614
1615
1616
1617
1618
1619
1620
1621
1622
1623

TCG Platform Certificate Profile
Specification Version 1.1
SET :SEQUENCE :OBJECT IDENTIFIER : [2.23.133.5.1.2]
SEQUENCE : OBJECT IDENTIFIER : [1.3.6.1.4.1.343]
SET :SEQUENCE :OBJECT IDENTIFIER : [2.23.133.5.1.4]
UTF8 STRING : 'S2600KP'SET :SEQUENCE :OBJECT IDENTIFIER : [2.23.133.5.1.5]
UTF8 STRING : 'H76962-350'
SET :SEQUENCE :OBJECT IDENTIFIER : [2.23.133.5.1.6]
UTF8 STRING : 'BQKP99940643'

SEQUENCE :OBJECT IDENTIFIER : [2.5.29.55]
BOOLEAN : 'FF'
OCTET STRING :SEQUENCE :SEQUENCE :CONTEXT SPECIFIC (0) :CONTEXT SPECIFIC (4) :SEQUENCE :SET :SEQUENCE :OBJECT IDENTIFIER : countryName [2.5.4.6]
PRINTABLE STRING : 'US'SET :SEQUENCE :OBJECT IDENTIFIER : stateOrProvinceName [2.5.4.8]
UTF8 STRING : 'CA'SET :SEQUENCE :OBJECT IDENTIFIER : localityName [2.5.4.7]
UTF8 STRING : 'Santa Clara'SET :SEQUENCE :OBJECT IDENTIFIER : organizationName [2.5.4.10]
UTF8 STRING : 'Intel Corporation'SET :SEQUENCE :OBJECT IDENTIFIER : organizationalUnitName [2.5.4.11]
UTF8 STRING : 'EK Certificate Issuer'
SET :SEQUENCE :OBJECT IDENTIFIER : commonName [2.5.4.3]
UTF8 STRING : 'www.intel.com'
SET :SEQUENCE :OBJECT IDENTIFIER : serialNumber [2.5.4.5]
PRINTABLE STRING : '128943787'
SEQUENCE :OBJECT IDENTIFIER : authorityKeyIdentifier [2.5.29.35]
OCTET STRING :SEQUENCE :CONTEXT SPECIFIC (0) : D46990260281D55E834B03976EAB8A9F8F84C983
SEQUENCE :OBJECT IDENTIFIER : authorityInfoAccess [1.3.6.1.5.5.7.1.1]
OCTET STRING :SEQUENCE :SEQUENCE :Revision 19

42
TCG PUBLISHED

10 April 2020

1624
1625
1626
1627
1628
1629
1630
1631
1632
1633
1634
1635
1636
1637
1638
1639
1640
1641
1642
1643
1644
1645
1646
1647
1648
1649
1650
1651
1652
1653
1654
1655
1656
1657
1658
1659
1660
1661
1662
1663
1664
1665
1666
1667
1668
1669
1670
1671
1672

OBJECT IDENTIFIER : ocsp [1.3.6.1.5.5.7.48.1]
CONTEXT SPECIFIC (6) : 'https://www.intel.com/ocsp'
SEQUENCE :OBJECT IDENTIFIER : cRLDistributionPoints [2.5.29.31]
OCTET STRING :SEQUENCE :SEQUENCE :CONTEXT SPECIFIC (0) :CONTEXT SPECIFIC (0) :CONTEXT SPECIFIC (6) : 'https://www.intel.com/platformcert.crl'
SEQUENCE :OBJECT IDENTIFIER : [1.2.840.113549.1.1.11]
NULL :BIT STRING UnusedBits:0 :AAEB0FD2FDCB81F265232255658B624F7E46D2FAFD939817F4B085
0F74F7D4FDA1F5E8D3DCB5ABDF884BE93E5D6E586B72EFFA18F2C0
2AE42844537FCA6C8D33698ED7D188E9729E587D8A99645AA0AC39
B27BEA394F9FAC02724E8CDAC77481141B26071B8EC8B28826263E
E2D6545C17B2550894D43864295AA54C285DFF55F7D627CE17284F
A76D360262E7F2607471510D53AD2C79B109F47409D6F017658DCF
B3A5A349043C5D94276129E7D94B07F761CE79D1DDD00EA31E907F
F7FBEF4C26124EEFD0622F40A45E2E600182E2E4D525E17F52FC9B
FE85C6835A2FE012D079B3B737AED132A180728FFFD0C9C421C4C2
1B2F672239DD450ED7BB092C82

Example 2 (Delta Platform Certificate in Attribute Certificate
Format)
The following section provides an example of a Delta Platform Certificate in AttributeCertificate format (RFC 5755) [11]. The PEM encoded version of the certificate as well as theASN.1 certificate text are included for convenience. The values used in this example are forillustrative purposes and must be replaced with manufacturer-specific data.

A.2.1 PEM Format-----BEGIN ATTRIBUTE CERTIFICATE----MIIKkzCCCXsCAQEwgbaggbMwgZqkgZcwgZQxCzAJBgNVBAYTAlVTMQswCQYDVQQIDAJDQTEUMBIGA1UEBwwLU2FudGEgQ2xhcmExGjAYBgNVBAoMEUludGVsIENvcnBv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Copyright © TCG 2020

1673
1674
1675
1676
1677
1678
1679
1680
1681
1682
1683
1684
1685
1686
1687
1688
1689
1690
1691
1692
1693
1694
1695
1696
1697
1698
1699
1700
1701
1702
1703
1704
1705
1706
1707
1708
1709
1710
1711
1712

TCG Platform Certificate Profile
Specification Version 1.1

gY+kgYwwgYkxCzAJBgNVBAYTAlVTMQswCQYDVQQIDAJGTDEXMBUGA1UEBwwORnQu
IExhdWRlcmRhbGUxGDAWBgNVBAoMD0FCQyBDb3Jwb3JhdGlvbjEkMCIGA1UECwwb
UGxhdGZvcm0gQ2VydGlmaWNhdGUgSXNzdWVyMRQwEgYDVQQDDAt3d3cuYWJjLmNv
bQIFCjVMzdumKxYpaHR0cHM6Ly93d3cuYWJjLmNvbS9jZXJ0cy80Mzg0Mzg5ODg0
My5jZXKHAQIwggF8MA4GBmeBBRIDAQQEAAAAQQwOQ29tcG9uZW50IENvcnAMCVhU
OTgyODdMTIAHRjk4MS0wMYEDMi4xggcrBgEEAYNIgwH/pDIwFwYFZ4EFEQIMDjcz
OjlCOjkyOjQwOkZBMBcGBWeBBREDDA4xMzozRjo5ODpDNTo1OaWBzaAxMA0GCysG
AQQBgbAaAQIBBCCYqtWRg/qrkZiq1ZGD+quRmKrVkYP6q5GYqtWRg/qrkaGBlzCB
jqSBizCBiDELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAkNBMREwDwYDVQQHDAhTYW4g
Sm9zZTEXMBUGA1UECgwOQ29tcG9uZW50IENvcnAxJDAiBgNVBAsMG1BsYXRmb3Jt
IENlcnRpZmljYXRlIElzc3VlcjEaMBgGA1UEAwwRd3d3LmNvbXBvbmVudC5jb20C
BAXek66mLhYsaHR0cHM6Ly93d3cuY29tcG9uZW50LmNvbS9jZXJ0cy85ODQ3Mjg3
OC5jZXKHAQAwggFcMA4GBmeBBRIDAQQEAAAALwwHWFlaIE9FTQwOTE1CVDM5MDRE
VzFUMUeACUM1NTU1LTU1NYEDNC4wggcrBgEEAYIsgwEApDIwFwYFZ4EFEQEMDjgy
Ojg5OkZBOkQzOjYxMBcGBWeBBRECDA5ENDo4MzpCNDpGMjo3OKWBtaAlMA0GCysG
AQQBgbAaAQIBBBQ0MuFBS2CXNDQyNDLhQUtglzQ0MqGBizCBg6SBgDB+MQswCQYD
VQQGEwJVUzELMAkGA1UECAwCQVoxEDAOBgNVBAcMB1Bob2VuaXgxFDASBgNVBAoM
C1hZQyBDb21wYW55MSQwIgYDVQQLDBtQbGF0Zm9ybSBDZXJ0aWZpY2F0ZSBJc3N1
ZXIxFDASBgNVBAMMC3d3dy54eXouY29tAgMOU7CmJhYkaHR0cHM6Ly93d3cueHl6
LmNvbS9jZXJ0cy85Mzg5MjguY2VyhwEBoTgWNmh0dHBzOi8vd3d3Lnh5emludGVn
cmF0b3JzLmNvbS9wbGF0Zm9ybWlkZW50aWZpZXJzLnhtbKIpMBYMC1RTQyBFbmFi
bGVkDAR0cnVlgAEAMA8MA0FNVAwFZmFsc2WAAQGjNxY1aHR0cHM6Ly93d3cueHl6
aW50ZWdyYXRvcnMuY29tL3BsYXRmb3JtcHJvcGVydGllcy54bWwwOAYGZ4EFBQEDMS4wLBYqaHR0cHM6Ly93d3cueHl6aW50ZWdyYXRvcnMuY29tL1BDUnNfVjIueG1s
MIICXzCBgwYDVR0gBHwwejB4BggqhkiXJwMBAjBsMDoGCCsGAQUFBwIBFi5odHRw
czovL3d3dy54eXppbnRlZ3JhdG9ycy5jb20vcGxhdGNlcnRjcHMucGRmMC4GCCsG
AQUFBwICMCIMIFRDRyBUcnVzdGVkIFBsYXRmb3JtIEVuZG9yc2VtZW50MH4GA1Ud
EQR3MHWkczBxMREwDwYGZ4EFBQEBDAVJbnRlbDEVMBMGBmeBBQUBAjAJBgcrBgEEAYJXMRMwEQYGZ4EFBQEEDAdTMjYwMEtQMRYwFAYGZ4EFBQEFDApINzY5NjItMzUw
MRgwFgYGZ4EFBQEGDAxCUUtQOTk5NDA2NDMwgbIGA1UdNwEB/wSBpzCBpDCBoaCB
nqSBmzCBmDELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAlRYMQ8wDQYDVQQHDAZBdXN0
aW4xFzAVBgNVBAoMDlhZWiBJbnRlZ3JhdG9yMR4wHAYDVQQLDBVFSyBDZXJ0aWZp
Y2F0ZSBJc3N1ZXIxHzAdBgNVBAMMFnd3dy54eXppbnRlZ3JhdG9ycy5jb20xETAP
BgNVBAUTCDMyODczODcyMB8GA1UdIwQYMBaAFNRpkCYCgdVeg0sDl26rip+PhMmD
MD8GCCsGAQUFBwEBBDMwMTAvBggrBgEFBQcwAYYjaHR0cHM6Ly93d3cueHl6aW50
ZWdyYXRvcnMuY29tL29jc3AwQAYDVR0fBDkwNzA1oDOgMYYvaHR0cHM6Ly93d3cu
eHl6aW50ZWdyYXRvcnMuY29tL3BsYXRmb3JtY2VydC5jcmwwDQYJKoZIhvcNAQEL
BQADggEBAGx3K17RCixE32TPB4u52TeoQxla9zROywTOAVDLa0Na4mfqmt3mTYuE
hkCbYnYX9sqa0KCYmBTTjjO7LndOO7UisQsx8vKTDDVQ6E3etxeeqdiY8g4Rv+t1
nC8Hna+UZ+Lv+rUze/FaOiXH4rn6kxK7jsGe2lVIC7qvIzWnjcF5kgxOQ3SqFmWJ

Revision 19

44
TCG PUBLISHED

10 April 2020

1713
1714
1715
1716

VFXj2FUqauP4WbDQEH/H+Fgr8QU5Qq/k6nPZXs1CG3cKZfcSOQerF7nWOgCdClbQ

1717
1718
1719
1720
1721
1722
1723
1724
1725
1726
1727
1728
1729
1730
1731
1732
1733
1734
1735
1736
1737
1738
1739
1740
1741
1742
1743
1744
1745
1746
1747
1748
1749
1750
1751
1752
1753
1754
1755
1756
1757
1758
1759
1760
1761
1762
1763
1764
1765
1766
1767
1768
1769
1770
1771

A.2.2 DER Format

pmfS+PWz10RWbvx6s9+EI+3Ky0GXQrfq3kmbM6Owmfgr9WMkoHJTiBRx8kK+bObd
7GjNOTGvbrHYTslWFF5aDB78md+jJ8A=-----END ATTRIBUTE CERTIFICATE-----

SEQUENCE :SEQUENCE :INTEGER : 1
SEQUENCE :CONTEXT SPECIFIC (0) :SEQUENCE :CONTEXT SPECIFIC (4) :SEQUENCE :SET :SEQUENCE :OBJECT IDENTIFIER : countryName [2.5.4.6]
PRINTABLE STRING : 'US'SET :SEQUENCE :OBJECT IDENTIFIER : stateOrProvinceName [2.5.4.8]
UTF8 STRING : 'CA'SET :SEQUENCE :OBJECT IDENTIFIER : localityName [2.5.4.7]
UTF8 STRING : 'Santa Clara'SET :SEQUENCE :OBJECT IDENTIFIER : organizationName [2.5.4.10]
UTF8 STRING : 'Intel Corporation'SET :SEQUENCE :OBJECT IDENTIFIER : organizationalUnitName [2.5.4.11]
UTF8 STRING : 'Platform Attribute Certificate Issuer'
SET :SEQUENCE :OBJECT IDENTIFIER : commonName [2.5.4.3]
UTF8 STRING : 'www.intel.com'
INTEGER : 602967EA7924FDEE6CC150B91E83777D1F427999
CONTEXT SPECIFIC (0) :SEQUENCE :CONTEXT SPECIFIC (4) :SEQUENCE :SET :SEQUENCE :OBJECT IDENTIFIER : countryName [2.5.4.6]
PRINTABLE STRING : 'US'SET :SEQUENCE :OBJECT IDENTIFIER : stateOrProvinceName [2.5.4.8]
UTF8 STRING : 'TX'SET :SEQUENCE :OBJECT IDENTIFIER : localityName [2.5.4.7]
UTF8 STRING : 'Austin'SET :SEQUENCE :OBJECT IDENTIFIER : organizationName [2.5.4.10]
UTF8 STRING : 'XYZ Integrator'

Copyright © TCG 2020

1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
1824
1825
1826
1827
1828
1829
1830
1831
1832
1833
1834

TCG Platform Certificate Profile
Specification Version 1.1

SET :SEQUENCE :OBJECT IDENTIFIER : organizationalUnitName [2.5.4.11]
UTF8 STRING : 'Delta Platform Attribute Certificate Issuer'
SET :SEQUENCE :OBJECT IDENTIFIER : commonName [2.5.4.3]
UTF8 STRING : 'www.xyzintegrators.com'
SEQUENCE :OBJECT IDENTIFIER : [1.2.840.113549.1.1.11]
NULL :INTEGER : 34928388
SEQUENCE :GENERALIZED TIME : '20181015210811Z'
GENERALIZED TIME : '20200820210811Z'
SEQUENCE :SEQUENCE :OBJECT IDENTIFIER : [2.23.133.2.25]
SET :SEQUENCE :OBJECT IDENTIFIER : [2.23.133.8.5]
SEQUENCE :OBJECT IDENTIFIER : [2.23.133.2.23]
SET :SEQUENCE :INTEGER : 1
INTEGER : 1
INTEGER : 13
SEQUENCE :OBJECT IDENTIFIER : [2.23.133.5.1.7.2]
SET :SEQUENCE :CONTEXT SPECIFIC (0) :SEQUENCE :SEQUENCE :OBJECT IDENTIFIER : [2.23.133.18.3.1]
OCTET STRING : 0000000A
UTF8 STRING : 'ABC OEM'UTF8 STRING : 'WR06X7871FTL'
CONTEXT SPECIFIC (0) : 41353535352D393939
CONTEXT SPECIFIC (1) : 312E31
CONTEXT SPECIFIC (2) : 2B06010401822C
CONTEXT SPECIFIC (3) : FF
CONTEXT SPECIFIC (4) :SEQUENCE :OBJECT IDENTIFIER : [2.23.133.17.1]
UTF8 STRING : 'AF:3A:94:10:A5'
SEQUENCE :OBJECT IDENTIFIER : [2.23.133.17.2]
UTF8 STRING : 'AF:37:10:D2:A8'
CONTEXT SPECIFIC (5) :CONTEXT SPECIFIC (0) :SEQUENCE :OBJECT IDENTIFIER : [1.3.6.1.4.1.22554.1.2.1]
OCTET
STRING
6003A33432FD914B6003A33432FD914B6003A33432FD914B6003A33432FD914B
CONTEXT SPECIFIC (1) :SEQUENCE :CONTEXT SPECIFIC (4) :SEQUENCE :SET :SEQUENCE :OBJECT IDENTIFIER : countryName [2.5.4.6]

Revision 19

46
TCG PUBLISHED:

10 April 2020

1835
1836
1837
1838
1839
1840
1841
1842
1843
1844
1845
1846
1847
1848
1849
1850
1851
1852
1853
1854
1855
1856
1857
1858
1859
1860
1861
1862
1863
1864
1865
1866
1867
1868
1869
1870
1871
1872
1873
1874
1875
1876
1877
1878
1879
1880
1881
1882
1883
1884
1885
1886
1887
1888
1889
1890
1891
1892
1893
1894
1895
1896
1897

PRINTABLE STRING : 'US'SET :SEQUENCE :OBJECT
IDENTIFIER:

stateOrProvinceName[2.5.4.8]
UTF8 STRING : 'FL'SET :SEQUENCE :OBJECT IDENTIFIER : localityName [2.5.4.7]
UTF8 STRING : 'Ft. Lauderdale'SET :SEQUENCE :OBJECT IDENTIFIER : organizationName [2.5.4.10]
UTF8 STRING : 'ABC Corporation'SET :SEQUENCE :OBJECT
IDENTIFIER:
organizationalUnitName[2.5.4.11]
UTF8 STRING : 'Platform Certificate Issuer'
SET :SEQUENCE :OBJECT IDENTIFIER : commonName [2.5.4.3]
UTF8 STRING : 'www.abc.com'
INTEGER : 43843898843
CONTEXT SPECIFIC (6) :IA5 STRING : 'https://www.abc.com/certs/43843898843.cer'
CONTEXT SPECIFIC (7) : 02
SEQUENCE :SEQUENCE :OBJECT IDENTIFIER : [2.23.133.18.3.1]
OCTET STRING : 00000041
UTF8 STRING : 'Component Corp'
UTF8 STRING : 'XT98287LL'
CONTEXT SPECIFIC (0) : 463938312D3031
CONTEXT SPECIFIC (1) : 322E31
CONTEXT SPECIFIC (2) : 2B060104018348
CONTEXT SPECIFIC (3) : FF
CONTEXT SPECIFIC (4) :SEQUENCE :OBJECT IDENTIFIER : [2.23.133.17.2]
UTF8 STRING : '73:9B:92:40:FA'
SEQUENCE :OBJECT IDENTIFIER : [2.23.133.17.3]
UTF8 STRING : '13:3F:98:C5:59'
CONTEXT SPECIFIC (5) :CONTEXT SPECIFIC (0) :SEQUENCE :OBJECT IDENTIFIER : [1.3.6.1.4.1.22554.1.2.1]
OCTET
STRING:
98AAD59183FAAB9198AAD59183FAAB9198AAD59183FAAB9198AAD59183FAAB91
CONTEXT SPECIFIC (1) :SEQUENCE :CONTEXT SPECIFIC (4) :SEQUENCE :SET :SEQUENCE :OBJECT IDENTIFIER : countryName [2.5.4.6]
PRINTABLE STRING : 'US'SET :SEQUENCE :OBJECT
IDENTIFIER:
stateOrProvinceName[2.5.4.8]
UTF8 STRING : 'CA'

Copyright © TCG 2020

1898
1899
1900
1901
1902
1903
1904
1905
1906
1907
1908
1909
1910
1911
1912
1913
1914
1915
1916
1917
1918
1919
1920
1921
1922
1923
1924
1925
1926
1927
1928
1929
1930
1931
1932
1933
1934
1935
1936
1937
1938
1939
1940
1941
1942
1943
1944
1945
1946
1947
1948
1949
1950
1951
1952
1953
1954
1955
1956
1957
1958
1959
1960

TCG Platform Certificate Profile
Specification Version 1.1
SET :SEQUENCE :OBJECT IDENTIFIER : localityName [2.5.4.7]
UTF8 STRING : 'San Jose'SET :SEQUENCE :OBJECT IDENTIFIER : organizationName [2.5.4.10]
UTF8 STRING : 'Component Corp'SET :SEQUENCE :OBJECT
IDENTIFIER:
organizationalUnitName[2.5.4.11]
UTF8 STRING : 'Platform Certificate Issuer'
SET :SEQUENCE :OBJECT IDENTIFIER : commonName [2.5.4.3]
UTF8 STRING : 'www.component.com'
INTEGER : 98472878
CONTEXT SPECIFIC (6) :IA5 STRING : 'https://www.component.com/certs/98472878.cer'
CONTEXT SPECIFIC (7) : 00
SEQUENCE :SEQUENCE :OBJECT IDENTIFIER : [2.23.133.18.3.1]
OCTET STRING : 0000002F
UTF8 STRING : 'XYZ OEM'UTF8 STRING : 'LMBT3904DW1T1G'
CONTEXT SPECIFIC (0) : 43353535352D353535
CONTEXT SPECIFIC (1) : 342E30
CONTEXT SPECIFIC (2) : 2B06010401822C
CONTEXT SPECIFIC (3) : 00
CONTEXT SPECIFIC (4) :SEQUENCE :OBJECT IDENTIFIER : [2.23.133.17.1]
UTF8 STRING : '82:89:FA:D3:61'
SEQUENCE :OBJECT IDENTIFIER : [2.23.133.17.2]
UTF8 STRING : 'D4:83:B4:F2:78'
CONTEXT SPECIFIC (5) :CONTEXT SPECIFIC (0) :SEQUENCE :OBJECT IDENTIFIER : [1.3.6.1.4.1.22554.1.2.1]
OCTET STRING : 3432E1414B60973434323432E1414B6097343432
CONTEXT SPECIFIC (1) :SEQUENCE :CONTEXT SPECIFIC (4) :SEQUENCE :SET :SEQUENCE :OBJECT IDENTIFIER : countryName [2.5.4.6]
PRINTABLE STRING : 'US'SET :SEQUENCE :OBJECT
IDENTIFIER:
stateOrProvinceName[2.5.4.8]
UTF8 STRING : 'AZ'SET :SEQUENCE :OBJECT IDENTIFIER : localityName [2.5.4.7]
UTF8 STRING : 'Phoenix'
SET :SEQUENCE :OBJECT IDENTIFIER : organizationName [2.5.4.10]

Revision 19

48
TCG PUBLISHED

10 April 2020

1961
1962
1963
1964
1965
1966
1967
1968
1969
1970
1971
1972
1973
1974
1975
1976
1977
1978
1979
1980
1981
1982
1983
1984
1985
1986
1987
1988
1989
1990
1991
1992
1993
1994
1995
1996
1997
1998
1999
2000
2001
2002
2003
2004
2005
2006
2007
2008
2009
2010
2011
2012
2013
2014
2015
2016
2017
2018
2019
2020
2021
2022
2023

UTF8 STRING : 'XYC Company'
SET :SEQUENCE :OBJECT
IDENTIFIER:
organizationalUnitName[2.5.4.11]
UTF8 STRING : 'Platform Certificate Issuer'
SET :SEQUENCE :OBJECT IDENTIFIER : commonName [2.5.4.3]
UTF8 STRING : 'www.xyz.com'
INTEGER : 938928
CONTEXT SPECIFIC (6) :IA5 STRING : 'https://www.xyz.com/certs/938928.cer'
CONTEXT SPECIFIC (7) : 01
CONTEXT SPECIFIC (1) :IA5 STRING : 'https://www.xyzintegrators.com/platformidentifiers.xml'
CONTEXT SPECIFIC (2) :SEQUENCE :UTF8 STRING : 'TSC Enabled'
UTF8 STRING : 'true'
CONTEXT SPECIFIC (0) : 00
SEQUENCE :UTF8 STRING : 'AMT'UTF8 STRING : 'false'
CONTEXT SPECIFIC (0) : 01
CONTEXT SPECIFIC (3) :IA5 STRING : 'https://www.xyzintegrators.com/platformproperties.xml'
SEQUENCE :OBJECT IDENTIFIER : [2.23.133.5.1.3]
SET :SEQUENCE :IA5 STRING : 'https://www.xyzintegrators.com/PCRs_V2.xml'
SEQUENCE :SEQUENCE :OBJECT IDENTIFIER : certificatePolicies [2.5.29.32]
OCTET STRING :SEQUENCE :SEQUENCE :OBJECT IDENTIFIER : [1.2.840.2983.3.1.2]
SEQUENCE :SEQUENCE :OBJECT IDENTIFIER : cps [1.3.6.1.5.5.7.2.1]
IA5 STRING : 'https://www.xyzintegrators.com/platcertcps.pdf'
SEQUENCE :OBJECT IDENTIFIER : unotice [1.3.6.1.5.5.7.2.2]
SEQUENCE :UTF8 STRING : 'TCG Trusted Platform Endorsement'
SEQUENCE :OBJECT IDENTIFIER : subjectAltName [2.5.29.17]
OCTET STRING :SEQUENCE :CONTEXT SPECIFIC (4) :SEQUENCE :SET :SEQUENCE :OBJECT IDENTIFIER : [2.23.133.5.1.1]
UTF8 STRING : 'Intel'
SET :SEQUENCE :OBJECT IDENTIFIER : [2.23.133.5.1.2]
SEQUENCE :OBJECT IDENTIFIER : [1.3.6.1.4.1.343]
SET :Copyright © TCG 2020

2024
2025
2026
2027
2028
2029
2030
2031
2032
2033
2034
2035
2036
2037
2038
2039
2040
2041
2042
2043
2044
2045
2046
2047
2048
2049
2050
2051
2052
2053
2054
2055
2056
2057
2058
2059
2060
2061
2062
2063
2064
2065
2066
2067
2068
2069
2070
2071
2072
2073
2074
2075
2076
2077
2078
2079
2080
2081
2082
2083
2084
2085
2086

TCG Platform Certificate Profile
Specification Version 1.1
SEQUENCE :OBJECT IDENTIFIER : [2.23.133.5.1.4]
UTF8 STRING : 'S2600KP'SET :SEQUENCE :OBJECT IDENTIFIER : [2.23.133.5.1.5]
UTF8 STRING : 'H76962-350'
SET :SEQUENCE :OBJECT IDENTIFIER : [2.23.133.5.1.6]
UTF8 STRING : 'BQKP99940643'

SEQUENCE :OBJECT IDENTIFIER : [2.5.29.55]
BOOLEAN : 'FF'
OCTET STRING :SEQUENCE :SEQUENCE :CONTEXT SPECIFIC (0) :CONTEXT SPECIFIC (4) :SEQUENCE :SET :SEQUENCE :OBJECT IDENTIFIER : countryName [2.5.4.6]
PRINTABLE STRING : 'US'SET :SEQUENCE :OBJECT IDENTIFIER : stateOrProvinceName [2.5.4.8]
UTF8 STRING : 'TX'SET :SEQUENCE :OBJECT IDENTIFIER : localityName [2.5.4.7]
UTF8 STRING : 'Austin'SET :SEQUENCE :OBJECT IDENTIFIER : organizationName [2.5.4.10]
UTF8 STRING : 'XYZ Integrator'
SET :SEQUENCE :OBJECT IDENTIFIER : organizationalUnitName [2.5.4.11]
UTF8 STRING : 'EK Certificate Issuer'
SET :SEQUENCE :OBJECT IDENTIFIER : commonName [2.5.4.3]
UTF8 STRING : 'www.xyzintegrators.com'
SET :SEQUENCE :OBJECT IDENTIFIER : serialNumber [2.5.4.5]
PRINTABLE STRING : '32873872'
SEQUENCE :OBJECT IDENTIFIER : authorityKeyIdentifier [2.5.29.35]
OCTET STRING :SEQUENCE :CONTEXT SPECIFIC (0) : D46990260281D55E834B03976EAB8A9F8F84C983
SEQUENCE :OBJECT IDENTIFIER : authorityInfoAccess [1.3.6.1.5.5.7.1.1]
OCTET STRING :SEQUENCE :SEQUENCE :OBJECT IDENTIFIER : ocsp [1.3.6.1.5.5.7.48.1]
CONTEXT SPECIFIC (6) : 'https://www.xyzintegrators.com/ocsp'
SEQUENCE :OBJECT IDENTIFIER : cRLDistributionPoints [2.5.29.31]
OCTET STRING :Revision 19

50
TCG PUBLISHED

10 April 2020

2087
2088
2089
2090
2091
2092
2093
2094
2095
2096
2097
2098
2099
2100
2101
2102
2103
2104
2105
2106
2107

SEQUENCE :SEQUENCE :CONTEXT SPECIFIC (0) :CONTEXT SPECIFIC (0) :CONTEXTSPECIFIC'https://www.xyzintegrators.com/platformcert.crl'
SEQUENCE :OBJECT IDENTIFIER : [1.2.840.113549.1.1.11]
NULL :BIT STRING UnusedBits:0 :6C772B5ED10A2C44DF64CF078BB9D937A843195AF7344ECB04CE01
50CB6B435AE267EA9ADDE64D8B8486409B627617F6CA9AD0A09898
14D38E33BB2E774E3BB522B10B31F2F2930C3550E84DDEB7179EA9
D898F20E11BFEB759C2F079DAF9467E2EFFAB5337BF15A3A25C7E2
B9FA9312BB8EC19EDA55480BBAAF2335A78DC179920C4E4374AA16
65895455E3D8552A6AE3F859B0D0107FC7F8582BF1053942AFE4EA
73D95ECD421B770A65F7123907AB17B9D63A009D0A56D0A667D2F8F5B3D744566EFC7AB3DF8423EDCACB419742B7EADE499B33A3B099
F82BF56324A07253881471F242BE6CE6DDEC68CD3931AF6EB1D84E
C956145E5A0C1EFC99DFA327C0(6):