thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Foundational

Trusted Platform Module (TPM)

Secure cryptoprocessor chip on a device that stores keys, measures boot integrity, and supports attestation.

Definition

A TPM (current version 2.0, ISO/IEC 11889) provides a hardware root of trust, protected key storage, random number generation, and platform configuration registers (PCRs) that record boot measurements. It enables BitLocker key sealing, measured boot, Windows Hello for Business, and device attestation. Windows 11 requires TPM 2.0.

Example

BitLocker seals the volume key to the TPM so it is released only if PCR measurements match a trusted boot.

Exam tip

TPM is built into the motherboard or firmware; HSMs are separate devices or appliances.

Don't confuse it with

Related terms