什么是TPM？ TPM的制造，管理和维护
Trusted Platform Module or TPM is an international standard for a secure cryptoprocessor. This standard is developed by Trusted Computing Group and standardized by International Organizational Standardization (ISO) and International Electrotechnical Commission (IEC) with number ISO/IEC 11889 in 2009.
可信平台模块或TPM是安全密码处理器的国际标准。 该标准由Trusted Computing Group开发，并于2009年由国际组织标准化组织(ISO)和国际电工委员会(IEC)标准化，编号为ISO / IEC 11889。
版本号 (Versions)
TCG continues to revise the TPM specification. Latest version is released at October 2014 with number 2.0
TCG继续修订TPM规范。 最新版本于2014年10月发布，编号为2.0
制造业 (Manufacturing)
TPM hardware is manufactured by different manufacturers. Important thing while buying and TPM is looking for its certificate. Trusted computing group certificates these manufactures. Certificated manufacturers and products can be found in the following link.
TPM硬件由不同的制造商制造。 购买时的重要事项，TPM正在寻找其证书。 可信计算小组对这些制造商进行认证。 可以在以下链接中找到获得认证的制造商和产品。
TPM Certified Products
TPM认证产品
Some of know certified manufacturers are;
一些知名的认证制造商是：
- STMicroelectronics 意法半导体
- Infineon Technologies英飞凌科技
- Nuvoton Technologies新唐科技
TPM架构(TPM Architecture)
A TPM hardware generally consist of Cryptographic processor, Persisten memory and Versatile memory.
TPM硬件通常由加密处理器，永久内存和多功能内存组成。
Cryptographic processor is used to;
密码处理器用于；
- Generate random numbers 产生随机数
- Generate RSA keys生成RSA密钥
- Generate SHA-1 hash生成SHA-1哈希
- Encryption-Decryption signature operations加密-解密签名操作
Persistent Memory is used to;
持久内存用于；
- Store Endorsement Key (EK) 店铺认可码(EK)
- Root Key (SRK) 根密钥(SRK)
Versatile Memory is used to;
通用内存用于；
- Store platform configuration registers 存储平台配置寄存器
- Store Attestation Identity Keys商店证明身份密钥
- Store other keys存储其他密钥
TPM Architecture TPM架构
算法支持(Algorithm Support)
For standard version 1.2 SHA-1 and RSA are required. AES is optional. Triple DES is banned.
对于标准版本1.2，需要SHA-1和RSA。 AES是可选的。 禁止使用三重DES。
For version 2 SHA-1 and SHA-256 are required for hash operations. RSA and AES algorithms are required for encryption operations.
对于版本2，哈希操作需要SHA-1和SHA-256。 加密操作需要RSA和AES算法。
管理 (Management)
TPM can be used for various operating systems like Windows, Linux, etc . Windows operating systems starting from Windows server 2008 and Windows 7 provides TPM Management console and API called TPM Base Services (TBS).
TPM可用于各种操作系统，例如Windows，Linux等。 从Windows Server 2008和Windows 7开始的Windows操作系统提供TPM管理控制台和称为TPM基本服务(TBS)的API。
Windows TPM管理 (Windows TPM Management)
In order to manage TPM with Windows operating systems the TPM should be initialized which can be started from run with the following command.
为了使用Windows操作系统管理TPM，应该初始化TPM，可以使用以下命令从运行中启动TPM。
tpm.msc
Windows TPM Management Windows TPM管理
In the actions pane click Initialize TPM and complete steps like password etc.
在操作窗格中，单击“ Initialize TPM然后完成密码等步骤。
Linux TPM管理 (Linux TPM Management)
Linux TPM devices are managed with tcsd tool. TPM device drivers are supported by Linux kernel natively so there is no need to install extra driver for standard TPM devices.
Linux TPM设备通过tcsd工具进行管理。 TPM设备驱动程序本身受Linux内核支持，因此无需为标准TPM设备安装额外的驱动程序。
TPM service can be started an initialized with the following command as root.
可以使用以下命令作为root初始化TPM服务。
$ tcsd -f
翻译自: https://www.poftut.com/tpm-manufacturing-management-maintenance-tpm/