A method for determining a trust status of a trusted platform module TPM, wherein the method is applied to a host, the TPM is disposed in the host, and the method comprises: receiving an unsealing request sent by a verifier, wherein the unsealing request carries a seal key handle; and the seal key handle is sent by the host to the verifier after the host seals platform configuration register PCR values in the TPM based on a first verification key when the host is in an initialization state, the first verification key is obtained after a second verification key transmitted on an encrypted channel between the verifier and the host is encrypted based on a local key of the host, and the verifier is any party that needs to verify the trust status of the TPM; unsealing current PCR values in the TPM based on the seal key handle, to obtain an unseal verification key; and determining verification information based on the unseal verification key, and sending the verification information to the verifier, to instruct the verifier to determine the trust status of the TPM based on the verification information; wherein before the receiving an unsealing request sent by a verifier, the method further comprises: when the host is currently in the initialization state, sealing the PCR values in the TPM based on the first verification key, to obtain the seal key handle; and sending the seal key handle to the verifier; and wherein before the sealing the PCR values in the TPM based on the first verification key, the method further comprises: obtaining the second verification key on the encrypted channel; and encrypting the second verification key based on the local key of the host, to obtain and store the first verification key; and wherein, the sending the seal key handle to the verifier includes: decrypting the first verification key based on the local key of the host, to obtain the second verification key; encrypting the seal key handle based on the second verification key, to obtain an encrypted seal key handle; and send the encrypted seal key handle to the verifier. receiving an unsealing request sent by a verifier, wherein the unsealing request carries a seal key handle; and the seal key handle is sent by the host to the verifier after the host seals platform configuration register PCR values in the TPM based on a first verification key when the host is in an initialization state, the first verification key is obtained after a second verification key transmitted on an encrypted channel between the verifier and the host is encrypted based on a local key of the host, and the verifier is any party that needs to verify the trust status of the TPM; unsealing current PCR values in the TPM based on the seal key handle, to obtain an unseal verification key; and determining verification information based on the unseal verification key, and sending the verification information to the verifier, to instruct the verifier to determine the trust status of the TPM based on the verification information; wherein before the receiving an unsealing request sent by a verifier, the method further comprises: when the host is currently in the initialization state, sealing the PCR values in the TPM based on the first verification key, to obtain the seal key handle; and sending the seal key handle to the verifier; and when the host is currently in the initialization state, sealing the PCR values in the TPM based on the first verification key, to obtain the seal key handle; and sending the seal key handle to the verifier; and wherein before the sealing the PCR values in the TPM based on the first verification key, the method further comprises: obtaining the second verification key on the encrypted channel; and encrypting the second verification key based on the local key of the host, to obtain and store the first verification key; and obtaining the second verification key on the encrypted channel; and encrypting the second verification key based on the local key of the host, to obtain and store the first verification key; and wherein, the sending the seal key handle to the verifier includes: decrypting the first verification key based on the local key of the host, to obtain the second verification key; encrypting the seal key handle based on the second verification key, to obtain an encrypted seal key handle; and send the encrypted seal key handle to the verifier. decrypting the first verification key based on the local key of the host, to obtain the second verification key; encrypting the seal key handle based on the second verification key, to obtain an encrypted seal key handle; and send the encrypted seal key handle to the verifier.