TPM 2.0 software stack with security integration

Trusted Platform Modules (TPM) enable secured remote software updates, disc encryption and user authentication. Hence, they are crucial for connected industrial, automotive and other embedded devices.

By using Infineon’s plug-and-play OPTIGA TPM 2.0, IoT system integrators can significantly improve the security of connected products. Software integration with TSS-FAPI does not require specific skills in low-level security specifications and reduces source code development by a factor of up to 16. Therefore, expenses and time to market can be reduced. Additionally, manufacturers can accelerate the process for certifying their industrial devices according to the IEC 62443 standard for industrial applications, which requires hardware-based safety from level 4 upwards.

The FAPI specification has been released recently as an international standard by the Trusted Computing Group (TCG). The specification is implemented in the TSS stack 1 together with the associated tools and plug-ins. The TSS stack is open-source software, which allows seamless integration of the TPM 2.0 in Linux-based systems. This includes the support of typical Linux software for device authentication, data encryption, software updates and remote device management.

In addition, the FAPI enables the native support of the PKCS#11 standard as a generic interface for user authentication, single sign-on and e-mail encryption/signing. The FAPI provides a default configuration for cryptographic functionalities, system integration and automated processing of security mechanisms according to the latest state-of-the-art and industrial best-practices.

The OPTIGA TPM acts as a vault for sensitive data in connected devices and lowers the risk of data and production losses due to cyberattacks. Infineon’s TPMs are certified by independent certification bodies according to Common Criteria, an international set of guidelines and specifications developed for evaluating information security products. The TSS stack including the recent FAPI has been verified with the Infineon TPM portfolio to achieve compliance and interoperability.

Application developers can use the OPTIGA TPM SLB 9670, OPTIGA TPM SLI 9670 and OPTIGA TPM SLM 9670 Iridium boards and TSS Quickstarter offered by Infineon to get started right away. Board and source code packages for the Infineon AURIX as well as for Arduino microcontrollers are available now.