TPM

term

security

Stands for: Trusted Platform Module

A chip that stores keys and measurements in hardware, so secrets are usable by the machine without being extractable from it.

The property that matters is that a key can be used without being read: software asks the chip to sign or decrypt, and never holds the private material. That is what lets disk encryption unlock without a password on the drive, and what lets a machine prove which software it booted. The limits are worth knowing too - it protects against copying the disk, not against an attacker who already runs code on the running machine as the user the key belongs to.

Also known as: Trusted Platform Module

All glossary entries