R
E
F
E
R
E
N
C
E

TCG OID Registry

Version
Revision:
May 7, 2024

1.00
.74

Contact: admin@trustedcomputinggroup.org
PUBLIC REVIEWWork in ProgressThis document is an intermediate draft
for comment only and is subject tochange without notice. Readers should
not design products based on thisdocument.

TCG OID Registry | Version 1.00 | Revision: .74 | 5/7/2024 | PUBLIC REVIEW© TCG 2024

TCG OID Registry

DISCLAIMERS, NOTICES, AND LICENSE TERMS
THIS DOCUMENT IS PROVIDED "AS IS" WITH NO WARRANTIES WHATSOEVER, INCLUDING ANY WARRANTY
OF MERCHANTABILITY, NONINFRINGEMENT, FITNESS FOR ANY PARTICULAR PURPOSE, OR ANY
WARRANTY OTHERWISE ARISING OUT OF ANY PROPOSAL, DOCUMENT OR SAMPLE.
Without limitation, TCG disclaims all liability, including liability for infringement of any proprietary rights, relating to useof information in this document and to the implementation of this document, and TCG disclaims all liability for cost of
procurement of substitute goods or services, lost profits, loss of use, loss of data or any incidental, consequential,
direct, indirect, or special damages, whether under contract, tort, warranty or otherwise, arising in any way out of use
or reliance upon this document or any information herein.
This document is copyrighted by Trusted Computing Group (TCG), and no license, express or implied, is granted
herein other than as follows: You may not copy or reproduce the document or distribute it to others without written
permission from TCG, except that you may freely do so for the purposes of (a) examining or implementing TCG
documents or (b) developing, testing, or promoting information technology standards and best practices, so long as
you distribute the document with these disclaimers, notices, and license terms.
Contact the Trusted Computing Group at www.trustedcomputinggroup.org for information on document licensing
through membership agreements.
Any marks and brands contained herein are the property of their respective owners.

TCG OID Registry | Version 1.00 | Revision: .74 | 5/7/2024 | PUBLIC REVIEW

Page 1© TCG 2024

TCG OID Registry

CHANGE HISTORYREVISIONDATE

DESCRIPTION

1.00/0.74

May 07,2024•

Initial publication.

TCG OID Registry | Version 1.00 | Revision: .74 | 5/7/2024 | PUBLIC REVIEW

Page 2© TCG 2024

TCG OID Registry

CONTENTSDISCLAIMERS, NOTICES, AND LICENSE TERMS ..................................................................................................... 1
CHANGE HISTORY ....................................................................................................................................................... 2
1

SCOPE and AUTHORITY ...................................................................................................................................... 42

OID Registry ........................................................................................................................................................... 0

TCG OID Registry | Version 1.00 | Revision: .74 | 5/7/2024 | PUBLIC REVIEW

Page 3© TCG 2024

TCG OID Registry

1 SCOPE and AUTHORITY
This document contains an informative list of Object Identifiers defined by the Trusted Computing Group’s
specifications. This document serves as only a reference with short descriptions. The source and normative referenceof the OID values and their definition in TCG specifications themselves.
The Trusted Computing Group is the Registration Authority (RA) for the OID Tree {joint-iso-itu-t(2) internationalorganizations(23) 133(133)} (2.23.133). All OIDs under this OID arc are the responsibility of the Trusted Computing
Group. No other entities are authorized to assign OIDs under the 2.23.133 arc.
Object Identifiers (OIDs) are used in many standards including, for example, X.509 Certificates. They are defined by“Recommendation ITU-T X.660 | ISO/IEC 9834 series, and in particular in Rec. ITU-T X.660 | ISO/IEC 9834-11. OIDs
are a standardized method for numerical identification of attributes. They are organized in a hierarchical manner withthe more general numbers at the left in a “dot” delimiter. OIDs are managed by assigned organizations (Called
Registration Authorities or RAs). RAs are assigned a specific “arc” and are the sole assigner of all OIDs under (i.e.,to the right of) that arc.

1 https://www.itu.int/itu-t/recommendations/rec.aspx?rec=X.660

TCG OID Registry | Version 1.00 | Revision: .74 | 5/7/2024 | PUBLIC REVIEW

Page 4© TCG 2024

2 OID Registry
PRIMARY IDENTIFIERSECONDARY IDENTIFIERDESCRIPTION

2.23.133

tcg

Root TCG OID under <{joint-iso-itu-t(2) international-organizations(23) 133}>
May also be known as tcpa

2.23.133.1

tcpa-specVersion

Identifies an attribute. Objects of this type may be typically expected to be held under
2.23.133.2.

2.23.133.1.0

tcg-specVersion-tpm12

Deprecated. SubjectAltName GeneralName HardwareModuleName.hwType OID indicating
TPM is family 1.2. Use OID 2.23.133.1.1 (tcg-specVersion-tpm12) instead.

2.23.133.1.1

tcg-specVersion-tpm12

Hardware version attribute used to identify TPM Library 1.2 for IETF hwType

2.23.133.1.2

tcg-specVersion-tpm20

Hardware version attribute used to identify TPM Library 2.0 for IETF hwType

2.23.133.2

tcg-attributeContainer for TCG/TCPA Attributes

2.23.133.2.1

tcg-at-tpmManufacturer

TPM Manufacturer Name for EK Credential Profile for TPM 2.0

2.23.133.2.2

tcg-at-tpmModel

TPM Model Number defined in EK Credential Profile for TPM 2.0

2.23.133.2.3

tcg-at-tpmVersion

TPM Version defined in EK Credential Profile for TPM 2.0

2.23.133.2.4

tcpa-at-platformManufacturer

Deprecated. Replaced by 2.23.133.5.1.1 and 2.23.133.5.1.2.

2.23.133.2.5
2.23.133.2.6
2.23.133.2.7
2.23.133.2.8
2.23.133.2.9
2.23.133.2.10
2.23.133.2.11
2.23.133.2.12
2.23.133.2.13
2.23.133.2.14
2.23.133.2.15

tcpa-at-platformModeltcpa-at-platformVersion
tcg-at-componentManufacturer
tcg-at-componentModeltcg-at-componentVersion
tcg-at-securityQualities
tcg-at-tpmProtectionProfile
tcg-at-tpmSecurityTarget
tcg-at-tbbProtectionProfile
tcg-at-tbbSecurityTarget
tcg-at-tpmIdLabel

2.23.133.2.16

tcg-at-tpmSpecification

Deprecated. Replaced by 2.23.133.5.1.4.
Deprecated. Replaced by 2.23.133.5.1.5.
Deprecated. Not defined for TPM 2.0
Deprecated. Not defined for TPM 2.0
Deprecated. Not defined for TPM 2.0
Defined in Platform Attribute Certificate Specification 1.0
Deprecated. Replaced by 2.23.133.2.18
Deprecated. Replaced by 2.23.133.2.18
Deprecated. Unused.
Deprecated. Unused.
Defined in EK Credential Profile for TPM2.0
Identifies the TPM Library Specification version. Defined in the EK Credential Profile for TPM
2.0

2.23.133.2.17

tcg-at-tcgPlatformSpecification

Identifies the Platform TPM Profile for the TPM. Defined in the Platform Certificate Specification

2.23.133.2.18

tcg-at-tpmSecurityAssertions

Identifies the security attributes of the TPM. Defined in the EK Credential Profile for TPM 2.0

2.23.133.2.19

tcg-at-tbbSecurityAssertions

Identifies the security attributes of the host platform. Defined in the Platform Certificate
Specification

TCG OID Registry | Version 1.00 | Revision: .74 | 5/7/2024 | PUBLIC REVIEW© TCG 2024

TCG OID Registry

PRIMARY IDENTIFIERSECONDARY IDENTIFIERDESCRIPTION

2.23.133.2.23

tcg-at-tcgCredentialSpecification

Attribute defining the Credential Profile Specification version. Defined in the Platform Certificate
Specification

2.23.133.2.25

tcg-at-tcgCredentialType

Attribute defining the Credential Type, for example distinguishes between Platform Certificate
and delta Platform Certificate. Defined in the Platform Certification Specification

2.23.133.3
2.23.133.3.1
2.23.133.4

tcg-protocol
tcg-prt-tpmIdProtocol
algorithm

Container for TCG Protocol Specific OIDSTCPA TPM 1.1b specification.
Container for TCG Algorithm Specific OIDS

2.23.133.4.1

tcg-algorithm-null

Identifies a null algorithm. Indicates than there is no key present.

2.23.133.5

tcg-platformClass

Container for TCG Platform Class Specific OIDS. Contains OIDs based on platform class
information including identifying an object as a certain platform class

2.23.133.5.1

tcg-Common

Container for TCG Common OIDS. Container for information common to any platform class

2.23.133.5.1.1

tcg-at-platformManufacturerStr

Manufacturer assigned String
Attribute contains the Platform's Model number assigned by the platform manufacturer toenable certificate-to-platform association.

2.23.133.5.1.2

tcg-at-platformManufacturerId

Unique platform manufacturer ID
The platform manufacturer’s IANA Private Enterprise Number OID.
Specified in the TC Platform Certificate Profile

tcg-at-platformConfigUri

URI for PCR values and platform configuration information published by the manufacturer.
Using this URI, the platform manufacturer may publish the list of initially valid PCRs andinformation on platform configuration attributes included in the Platform Certificate.
Specified in the TCG Platform Certificate Profile

tcg-at-platformModel

Manufacturer assigned platform Model Number.
Attribute contains the Platform's Model number assigned by the platform manufacturer toenable certificate-to-platform association.
Specified in the TCG Platform Certificate Profile.

tcg-at-platformVersion

Manufacturer assigned platform Version.
Attribute contains the Platform's Version assigned by the platform manufacturer to enable
certificate to platform association.
Specified in the TCG Platform Certificate Profile.

tcg-at-platformSerial

Manufacturer assigned platform Serial Number.
Attribute contains a UTF-8 encoded string representing the serial number assigned by theplatform manufacturer to enable a certificate to platform association. NOTE: the content of thestring is manufacture specific.
Specified in the TCG Platform Certificate Profile.

2.23.133.5.1.3

2.23.133.5.1.4

2.23.133.5.1.5

2.23.133.5.1.6

TCG OID Registry | Version 1.00 | Revision: .74 | 5/7/2024 | PUBLIC REVIEW

Page 1© TCG 2024

TCG OID Registry

SECONDARY IDENTIFIERDESCRIPTION

tcg-at-platformConfiguration

Container for Non-Security related Platform Configuration.
Attributes under this container include platform attributes that are not security related. Thesemay include the platform CPU serial numbers, motherboard serial number, and mac addresses.
Specified in the TCG Platform Certificate Profile

tcg-at-platformConfiguration-v1

Non-Security related Platform Configuration. Version 1.
Attribute under this container include platform attributes that are not security related. Thesemay include the platform CPU serial numbers, motherboard serial number, and MAC ID.
Specified in the TCG Platform Certificate Profile

2.23.133.5.1.7.2

tcg-at-platformConfiguration-v2

Non-Security related Platform Configuration. Version 2.
Attribute under this container include platform attributes that are not security related. Thesemay include the platform CPU serial numbers, motherboard serial number, and mac addresses.
Specified in the TCG Platform Certificate Profile

2.23.133.5.4

tcg-dice

Container for TCG DICE Specific OIDS

2.23.133.5.4.1

tcg-dice-TcbInfo

This extension defines attestation Evidence about the DICE layer that is associated with the
Subject key. The certificate Subject and SubjectPublicKey identifies the entity to which the
DiceTcbInfo extension applies.
The Verifier must process this extension. See DICE Attestation Architecture, Version 1.00,
Revision 0.14, May 4, 2020

2.23.133.5.4.2

tcg-dice-endorsement-manifest

Endorsement values that may be conveyed using certificate extensions. See DICE Attestation
Architecture, Version 1.00, Revision 0.14, May 4, 2020

2.23.133.5.4.3

tcg-dice-endorsement-manifest-uri

This extension contains a URI that locates a reference manifest. See DICE Attestation
Architecture, Version 1.00, Revision 0.14, May 4, 2020

2.23.133.5.4.4

tcg-dice-Ueid

This extension contains a UEID. See DICE Attestation Architecture, Version 1.00, Revision
0.14, May 4, 2020

2.23.133.5.4.5

tcg-dice-MultiTcbInfo

A DICE TCB may consist of multiple elements supplied by different vendors or supply chain
entities. See DICE Attestation Architecture, Version 1.00, Revision 0.14, May 4, 2020

2.23.133.5.4.6

tcg-dice-UCCS-evidence

Unprotected CWT Claims Set (UCCS) defines a certificate Evidence extension containing
UCCS formatted Evidence. See DICE Attestation Architecture, Version 1.00, Revision 0.14,
May 4, 2020

2.23.133.5.4.7

tcg-dice-manifest-evidence

A SWID or CoSWID manifest may be used to contain Evidence. See DICE Attestation
Architecture, Version 1.00, Revision 0.14, May 4, 2020

PRIMARY IDENTIFIER

2.23.133.5.1.7

2.23.133.5.1.7.1

TCG OID Registry | Version 1.00 | Revision: .74 | 5/7/2024 | PUBLIC REVIEW

Page 2© TCG 2024

TCG OID Registry

PRIMARY IDENTIFIERSECONDARY IDENTIFIERDESCRIPTION

2.23.133.5.4.100.6

tcg-dice-kp-identityInit

The identityInit policy OID authorizes a key to authenticate an initial identity (e.g., IDevID) for adevice, DICE layer or DICE component. See DICE Certificate Profiles, Version 1.0, Revision
0.01, March 10, 2020

2.23.133.5.4.100.7

tcg-dice-kp-identityLoc

The identityLoc policy OID authorizes a key to authenticate a local identity (e.g., LDevID) for adevice, DICE layer or DICE component. See DICE Certificate Profiles, Version 1.0, Revision
0.01, March 10, 2020

2.23.133.5.4.100.8

tcg-dice-kp-attestInit

The attestInit policy OID authorizes an attestation key to attest (sign) evidence that describes adevice (e.g., PCR, SW hash, product name), DICE layer or DICE component. See DICE
Certificate Profiles, Version 1.0, Revision 0.01, March 10, 2020

2.23.133.5.4.100.9

tcg-dice-kp-attestLoc

The attestLoc policy OID authorizes an attestation key to attest (sign) evidence that describes adevice (e.g., PCR, SW hash, product name), DICE layer or DICE. See DICE Certificate Profiles,
Version 1.0, Revision 0.01, March 10, 2020

2.23.133.5.4.100.10

tcg-dice-kp-assertInit

The assertInit policy OID authorizes an attestation key to assert (sign) reference measurements
about the device, DICE layer or DICE component. See DICE Certificate Profiles, Version 1.0,
Revision 0.01, March 10, 2020

2.23.133.5.4.100.11

tcg-dice-kp-assertLoc

The assertLoc policy OID authorizes an attestation key to assert (sign) reference
measurements about the device, DICE layer or DICE component. See DICE Certificate Profiles,
Version 1.0, Revision 0.01, March 10, 2020

2.23.133.5.4.12

tcg-dice-kp-eca

The ECA policy OID authorizes use of an embedded CA. It authorizes certificate issuance forkeys residing on the current device, DICE layer or DICE component. See DICE Certificate
Profiles, Version 1.0, Revision 0.01, March 10, 2020

2.23.133.6

tcg-ceContainer for tcg Certificate Extensions

2.23.133.6.1.0

tcg-ce-skae-module

Deprecated. Container for Identifies the ASN.1 module. Published in error.

2.23.133.6.1.1

tcg-ce-skaesubjectKeyAttestationEvidence

TPM 1.2 Subject Key Attestation Evidence SEQUENCE.

2.23.133.6.1.2

tcg-ce-skae-caVerifiedTpmKey

The presence of this Policy OID in an issued end-entity certificate is an assertion that the CA
used TCG specified methods to prove TPM residency of the key and, further, that the key is on
the specified device. This OID is specific to family TPM 1.2.

2.23.133.6.2

tcg-ce-relevantCredentials

Identifies relevant credentials. TCG Credential Profiles v1.1 rev 1.014

2.23.133.6.3

tcg-ce-relevantManifests

Identifies relevant credentials. TCG Credential Profiles v1.1 rev 1.014

2.23.133.7

Certification OIDs

Deprecated. Container for OIDs assigned to Certifications

TCG OID Registry | Version 1.00 | Revision: .74 | 5/7/2024 | PUBLIC REVIEW

Page 3© TCG 2024

TCG OID Registry

PRIMARY IDENTIFIERSECONDARY IDENTIFIERDESCRIPTION

2.23.133.7.4

DeprecatedDeprecated. Trusted Computing Group Trusted Platform Module TPM Family 1.2; Level 2
Protection Profile

2.23.133.7.5

DeprecatedDeprecated. Trusted Computing Group PC Client Specific Trusted Platform Module TPM Family
1.2; Level 2 Protection Profile

2.23.133.8.1

tcg-kp-EKCertificate

Identifies the certificate as an Endorsement Credential.
Defined in the TCG EK Credential Profile for TPM Family 2.0

2.23.133.8.2

tcg-kp-PlatformAttributeCertificate

Identifies the certificate as a Platform Credential
Defined in the TCG Platform Certificate Profile Specification

2.23.133.8.3

tcg-kp-AIKCertificate

Identifies the certificate as an AIK credential
Defined in the TCG Credential Profiles for TPM Family 1.2

2.23.133.8.4

tcg-kp-PlatformKeyCertificate

Identifies the certificate as a Platform Certificate as defined in RFC 5280
Defined in the TCG Platform Attribute Credential Profile Version 1 Revision 16

2.23.133.8.5

tcg-kpDeltaPlatformAttributeCertificate

Identifies a Deltla Platform Attribute Certificate
Defined in the TCG Platform Certificate Profile v1.1, r19

2.23.133.10.1.1.1

tcg-tpma-x509-key-usage

TPM2 object TPMA_X509_KEY_USAGE as described in TPM 2 Library Specification 1.59+.
This is used in the TPM2_Certifyx509 command. Its use, however, is not restricted to this TPM
command. If field size is zero length, no information about the key is provided. If field size isfour, the field contains the structure TPMA_OBJECT. No other size or field values are
permitted.

2.23.133.11

tcg-ca2.23.133.11.1

tcg-ca-policy

2.23.133.11.1.1

tcg-cap-verifiedTPMResidency

Presence of this Policy OID in an end-entity certificate is an assertion by the CA that it used
TCG specified methods to prove TPM residency of the key and, further, that the key is on thespecified device.

2.23.133.11.1.2

tcg-cap-verifiedTPMFixed

Presence of this Policy OID in an end-entity certificate is an assertion by the CA that it hasverified that the fixedTPM bit was set in the key public area. This OID may not be combinedwith tcg-cap-verifiedTPMRestricted.

2.23.133.11.1.3

tcg-cap-verifiedTPMRestricted

Presence of this Policy OID in an end-entity certificate is an assertion by the CA that it hasverified both the fixedTPM and Restricted bits are set in the key public area. This ExtKeyUsageOID may not be combined with tcg-cap-verifiedTPMFixed.

TCG OID Registry | Version 1.00 | Revision: .74 | 5/7/2024 | PUBLIC REVIEW

Container for Certification Authority OIDs
Container for for all the below attributes, the signer asserts that the following has been
evaluated to be true

Page 4© TCG 2024

TCG OID Registry

PRIMARY IDENTIFIERSECONDARY IDENTIFIERDESCRIPTION

2.23.133.16.1.1.1

tcg-tnc-ifm-cmsifmSecurityCapabilities

Identifies Security Capabilities. Defined in IF-M Security: Bindings to CMS. Identifies a list of
OIDs and cryptographic parameters associated with the algorithms supported by the sender.

2.23.133.16.2

tcg-tnc-ifftnc

Container for Trusted Network Connect Work Group Federated TNC OIDs

2.23.133.16.2.1

tcg-tnc-ifftnc-posture

Container for TNC Posture data. See Federated TNC 1.0R26

2.23.133.16.2.2

tcg-tnc-ifftnc-eiu

2.23.133.16.2.2.1

tcg-tnc-ifftnc-eiu-NameIdentifier

Container for Endpoint Identity OIDs
MAC Address Endpoint Identifier for SAML MAC ID Endpoint Name Identifier. See Federated
TNC 1.0R26

2.23.133.16.2.2.2

tcg-tnc-ifftnc-eiu-SamlAaEntityId

2.23.133.16.2.3

Container for Endpoint Attribute OIDs

2.23.133.17

tcg-tnc-ifftnc-endpoint
tcg-tnc-ifftnc-endpointFtncServiceEndpoint
tcg-tnc-ifftnc-endpointOldestReceivedInformationAge
tcg-tnc-ifftnc-endpointIftnccsAccessRecommendation
tcg-tnc-ifftnc-endpointifmapResultFilters
tcg-address

2.23.133.17.1

tcg-address-ethernetmac

Ethernet Adapter MAC ID, defined in the TCG Platform Certificate Profile Specification

2.23.133.17.2

tcg-address-wlanmac

Wireless LAN adapter MAC ID, defined in the TCG Platform Certificate Profile Specification

2.23.133.17.3

tcg-address-bluetoothmac

Bluetooth adapter MAC ID, defined in the TCG Platform Certificate Profile Specification

2.23.133.18

tcg-registry

Container for OIDs that define TCG Registries

2.23.133.18.1

tcg-registry-platformClass

Container for defining Platform Class from various standards and other organizations
Specified in TCG Platform Certificate Profile

2.23.133.18.1.1

tcg-registry-platformClass-tcg

TCG Defined Platform Class
The field is specified in the TCG Registry of Reserved Handles and Localities

2.23.133.18.2

tcg-registry-vendorID

2.23.133.18.2.1

tcg-registry-vendorID-tcg

2.23.133.18.2.2

tcg-registry-vendorID-iana

2.23.133.16.2.3.1
2.23.133.16.2.3.2
2.23.133.16.2.3.3
2.23.133.16.2.3.4

TCG OID Registry | Version 1.00 | Revision: .74 | 5/7/2024 | PUBLIC REVIEW

Identifier of Attribute Authority for SAML MAC ID Endpoint Name Attribute Authority. See
Federated TNC 1.0R26
URI of FTNC Service Endpoint. See Federated TNC 1.0R26
Time when Oldest Service Posture was collected. See Federated TNC 1.0R26
IF-TNCCS Access Recommendation Type. See Federated TNC 1.0R26
IF-MAP Metadata Result Filters. See Federated TNC 1.0R26
Container for TCG defined address attributes

Container for defining Platform Class from various standards and other organizations for
Vendor IDs
TCG Defined VendorIDs
Vendor IDs managed by TCG
Values defined in the TCG TPM Vendor ID Registry
IANA defined
Defined in: https://www.iana.org/assignments/enterprise-numbers/enterprise-numbers
Page 5© TCG 2024

TCG OID Registry

PRIMARY IDENTIFIERSECONDARY IDENTIFIERDESCRIPTION

2.23.133.18.3

tcg-registry-componentClass

Container for OIDs defining Component Class from various non-TCG standards and otherorganizations for Vendor IDs

2.23.133.18.3.1

tcg-registry-componentClass-tcg

2.23.133.18.3.2

tcg-registry-componentClass-ietf

2.23.133.18.3.3

tcg-registry-componentClass-dmtf

2.23.133.18.3.4

tcg-registry-componentClass-pcie

TCG defined Component Class Registry specified in the TCG PCIe Component Class Registry

1.3.6.1.4.1.21911.1.1.1.1
1.3.6.1.4.1.21911.1.1.1.2

tcgTpmQuoteMibVerBase
tcgTpmQuoteMibVersion

Number base (radix) for version reporting.
The MIB version supported by the device.

1.3.6.1.4.1.21911.1.1.1.3

tcgTpmQuoteMibGeneralVersionInfo

A text string identifying the device, including model and software version.

1.3.6.1.4.1.21911.1.1.2.1.1

tcgTpmQuoteLockHolderIpAddrType

The Inet address Type of an entity requesting a TpmQuoteTable lock.

1.3.6.1.4.1.21911.1.1.2.1.2

tcgTpmQuoteLockHolderIpAddress

The Inet Address of an entity requesting a TpmQuoteTable lock.

1.3.6.1.4.1.21911.1.1.2.2.1

tcgTpmQuoteLockNotification

OID of the notification sent when a new TPM quote lock row is created

1.3.6.1.4.1.21911.1.1.3.1.1.1

tcgTpmSelector

Index of a TPM. Refer to MIB text description.

1.3.6.1.4.1.21911.1.1.3.1.1.2

tcgTpmClassThe TPM specificatoin generation (i.e. TPM family, v1.x, v2.x) of TPM

1.3.6.1.4.1.21911.1.1.3.1.1.3

tcgTpmSpecRev

TPM Specification Revision of TPM

1.3.6.1.4.1.21911.1.1.3.1.1.4

tcgTpmSelectorDescription

Printable ASCII string describing the module or device containing the TPM

1.3.6.1.4.1.21911.1.1.3.1.1.5

tcgTpmFirmwareVersion

A 64-bit integer specifying the TPM-vendor specific version number

1.3.6.1.4.1.21911.1.1.4.1.1.1

tcgTpmQuoteLockTpmSelector

The identifier (same as used in the Entity MIB) for the TPM to access for quote operations

1.3.6.1.4.1.21911.1.1.4.1.1.2

tcgTpmQuoteTpmLockVal

A random value returned upon lock creation, used as authorization in later commands.

1.3.6.1.4.1.21911.1.1.4.1.1.3

tcgTpmQuoteLockTimeout

A time value returned upon lock creation representing lock lifetime, in seconds.

1.3.6.1.4.1.21911.1.1.5.1.1.1

tcgTpmQuoteCertTpmSelector

The identifier (same as used in the Entity MIB) for the TPM to access for quote operations.

1.3.6.1.4.1.21911.1.1.5.1.1.2

tcgTpmQuoteCertChainIndex

1.3.6.1.4.1.21911.1.1.5.1.1.3
1.3.6.1.4.1.21911.1.1.5.1.1.4
1.3.6.1.4.1.21911.1.1.5.1.1.5
1.3.6.1.4.1.21911.1.1.5.1.1.6

tcgTpmQuoteCertType
tcgTpmQuoteCertFragmentIndex
tcgTpmQuoteCertBuf
tcgTpmQuoteCertStatus

TCG OID Registry | Version 1.00 | Revision: .74 | 5/7/2024 | PUBLIC REVIEWTCG Defined Component Class
Registry specified in the TCG
TCG Component Class Registry
ietf defined Component Classes
Registry managed by IETF
Specified in the TCG Platform Certificate Profile
TCG defined Component Class Registry
Specified in the TCG SMBIOS Registry

The identifying position, in a certificate chain, of the certificate to be retrieved. A leaf cert index
is 1.
The type of certificate to be retrieved
Selects the window position to use in retrieving data
The returned data
The returned row status
Page 6© TCG 2024

TCG OID Registry

PRIMARY IDENTIFIERSECONDARY IDENTIFIERDESCRIPTION

1.3.6.1.4.1.21911.1.1.5.2.1.1

tcgTpmQuoteTpmSelector

The identifier (same as used in the Entity MIB) for the TPM to access for quote operations

1.3.6.1.4.1.21911.1.1.5.2.1.2

tcgTpmQuoteLockValue

The authorization value returned in the tcgTpmQuoteTpmLockVal variable

1.3.6.1.4.1.21911.1.1.5.2.1.3

tcgTpmQuoteCertSelector

The certificate chain to use in attestation. This selector is the value returned by
tcgTpmQuoteCertChainIndex

1.3.6.1.4.1.21911.1.1.5.2.1.4

tcgTpmQuoteReqType

The type of attestation requested. This is defined in the MIBs textual conventions.

1.3.6.1.4.1.21911.1.1.5.2.1.5
1.3.6.1.4.1.21911.1.1.5.2.1.6
1.3.6.1.4.1.21911.1.1.5.2.1.7

tcgTpmQuoteNoncetcgTpmQuoteDigestSelector
tcgTpmQuotePcrSelector

A nonce supplied by the caller
A selector for the tcgTpmQuotePCRDigest algorithm.
A bitmask to select PCR registers to be attested.

1.3.6.1.4.1.21911.1.1.5.2.1.8

tcgTpmQuotePCRDigestAlg

Selects the hash algorithm used to compute the PCR digest.

1.3.6.1.4.1.21911.1.1.5.2.1.9

tcgTpmQuoteRespType

Identifies the TPM Quote type returned

1.3.6.1.4.1.21911.1.1.5.2.1.10

tcgTpmQuoteQualifiedSigner

TPMU_NAME that designates the qualified name of the public key used for quote signature

1.3.6.1.4.1.21911.1.1.5.2.1.11

tcgTpmQuoteClockInfo

TPMS_CLOCK_INFO, consisting of the subfields Clock, ResetCount, RestartCount and Safe

1.3.6.1.4.1.21911.1.1.5.2.1.12

tcgTpmQuoteFirmwareVersion

TPM firmware version, encoded as specified by the TPM library specification

1.3.6.1.4.1.21911.1.1.5.2.1.13
1.3.6.1.4.1.21911.1.1.5.2.1.14
1.3.6.1.4.1.21911.1.1.5.2.1.15
1.3.6.1.4.1.21911.1.1.5.2.1.16

tcgTpmQuote
tcgTpmQuoteLogFileLines
tcgTpmQuotePCRDigest
tcgTpmQuoteRowStatus

Returned TPM Quote data
Length of the event log, in lines, at the time of quote
An untrusted digest, intended for diagnostic purposes
The returned row status

1.3.6.1.4.1.21911.1.1.5.3.1.1

tcgTpmQuoteLogTpmSelector

The identity (same as used in the Entity MIB) for the TPM to access for quote operations

1.3.6.1.4.1.21911.1.1.5.3.1.2
1.3.6.1.4.1.21911.1.1.5.3.1.3
1.3.6.1.4.1.21911.1.1.5.3.1.4
1.3.6.1.4.1.21911.1.1.5.3.1.5
1.3.6.1.4.1.21911.1.1.5.3.1.6
1.3.6.1.4.1.21911.1.1.6
1.3.6.1.4.1.21911.1.1.7

tcgTpmQuoteLogSelector
tcgTpmQuoteLogLineNumber
tcgTpmQuoteLogFragmentIndex
tcgTpmQuoteLogLineBuf
tcgTpmQuoteLogStatus
tcgTpmQuoteNotificationGrouptcgTpmSelectionGroup

Selects which log is to be returned
0-based log line number
Selects the window position to use in retrieving data
The returned log entry
The returned SNMP row status
SNMP notification group
A group of objects used as table indices1.3.6.1.4.1.21911.1.1.8

tcgTpmQuoteObjectGroupA group of objects required to support boot log and TPM Quote retrieval

1.3.6.1.4.1.21911.1.1.9

tcgTpmQuoteMibVersionGroupA group of objects to support MIB versioning

TCG OID Registry | Version 1.00 | Revision: .74 | 5/7/2024 | PUBLIC REVIEW

Page 7© TCG 2024