New course launched to enhance TPM skills for developers

Software developers and students now have access to a new training course aimed at advancing their Trusted Platform Module (TPM) skills, courtesy of the Trusted Computing Group (TCG).

The new course, titled 'Trusted Computing 1102: Intermediate TPM Usage', has been formulated in collaboration with OpenSecurityTraining2 (OST2), a company known for its expertise in cybersecurity training. This course builds on the foundational knowledge introduced in the earlier released course, and it focuses on new technical topics. Notable among these are the use of Enhanced System API (ESAPI), the concept of Endorsement Hierarchy and Endorsement Key, and the application of Platform Configuration Registers (PCRs) for machine identity and attestation.

TCG President Joe Pennisi commented, "Ensuring that software developers and students can develop their cybersecurity skills and enhance the security of devices is essential for creating a trusted ecosystem. We are thrilled to continue our partnership with OTS2 in providing accessible, in-depth training that empowers the next generation of security experts".

The course is particularly aimed at individuals who have completed the introductory TC1101 course or have similar experience with TPMs. Participants are expected to engage in comprehensive, hands-on labs that include 20 practical exercises. These exercises are designed to offer real-world applicability and to boost understanding of the advanced functionalities of TPM technology.

According to OST2 Founder Xeno Kovah, "With TC1102, we have taken the next step to give students and industry professionals the knowledge to effectively implement TPMs in a wide range of applications. The TPM is the backbone of ensuring trust in a range of digital devices, and it's a great privilege to have TCG's continued support in increasing our comprehensive training courses."

Upon participation in TC1102, students will also have access to the TPM.dev Users Group. This community serves as a support network, offering additional learning resources centred on TPM usage and integration, and providing opportunities to share insights with peers.

TC1102 Instructor and Founder of TPM.dev, Dimi Tomov, highlighted the increasing preference for TPM 2.0 in critical systems, stating, "TPM 2.0 is becoming a preferred choice in critical IoT and Edge systems, including automotive and medical, because of its unique secure capabilities that do not exist in Secure Elements, like PCRs and TPM 2.0 policy. Both can be applied to the TPM's non-volatile storage and its cryptographic operations. TC1102 enables developers to learn how to use TPM extended authorisation like PCR policy to protect cryptographic keys and data against a compromised system."