TrustedInfrastructure_Hosts_Hardware_Tpm_EndorsementKeys_Info

The EndorsementKeys.Info structure contains information that describes a TPM endorsement key.

JSON Example

{
    "type": "string",
    "public_area": "string",
    "name": "string",
    "qualified_name": "string",
    "public_key": "string",
    "certificate": "string",
    "manufacturer_certificate_uri": "string",
    "manufacturer_certificates": {
        "cert_chain": [
            "string"
        ]
    }
}

TrustedInfrastructure_Hosts_Hardware_Tpm_EndorsementKeys_Type

type

Required

The EndorsementKeys.Type enumerated type defines the endorsement key type based on key algorithms.
RSA_2048 : The RSA 2048 bit key.
ECC_NIST_P_256 : The ECC NISTP-256 bit key.

string As binary

public_area

Required

The TPM endorsement key public area. The public area is a TPM2B_PUBLIC structure.

Trusted Platform Module Library Part 2: Structures, Family "2.0", Level 00 Revision 01.59, November 8, 2019, Section 12.2.5 TPM2B_PUBLIC

string As binary

name

Required

The TPM endorsement key name. The name is a TPM2B_NAME structure.

Trusted Platform Module Library Part 2: Structures, Family "2.0", Level 00 Revision 01.59, November 8, 2019, Section 10.5.3 TPM2B_NAME

string As binary

qualified_name

Required

The TPM endorsement key qualified name. The qualified name is a TPM2B_NAME structure.

Trusted Platform Module Library Part 2: Structures, Family "2.0", Level 00 Revision 01.59, November 8, 2019, Section 10.5.3 TPM2B_NAME

string

public_key

Optional

The TPM public endorsement key in PEM format. if unset, the PEM format public key could not be determined.

string

certificate

Optional

The TPM endorsement key certificate in PEM format. if unset, the certificate cannot be retrieved from the TPM.

string

manufacturer_certificate_uri

Optional

The TPM endorsement key issuer URL extracted from the TPM endorsement key certificate. if unset, the URI cannot be retrieved from the endorsement key certificate.

TrustedInfrastructure_X509CertChain

manufacturer_certificates

Optional

The X509CertChain structure contains x509 certificate chain.