TrustedInfrastructureHostsHardwareTpmEndorsementKeysInfo

The EndorsementKeys.Info structure contains information that describes a TPM endorsement key.


Properties

string as binary
qualified_name Required

The TPM endorsement key qualified name. The qualified name is a TPM2B_NAME structure.

Trusted Platform Module Library Part 2: Structures, Family “2.0”, Level 00 Revision 01.59, November 8, 2019, Section 10.5.3 TPM2B_NAME


type Required

The EndorsementKeys.Type enumerated type defines the endorsement key type based on key algorithms.
RSA_2048 : The RSA 2048 bit key.
ECC_NIST_P_256 : The ECC NISTP-256 bit key.

Possible values are: RSA_2048ECC_NIST_P_256


string as binary
name Required

The TPM endorsement key name. The name is a TPM2B_NAME structure.

Trusted Platform Module Library Part 2: Structures, Family “2.0”, Level 00 Revision 01.59, November 8, 2019, Section 10.5.3 TPM2B_NAME


string as binary
public_area Required

The TPM endorsement key public area. The public area is a TPM2B_PUBLIC structure.

Trusted Platform Module Library Part 2: Structures, Family “2.0”, Level 00 Revision 01.59, November 8, 2019, Section 12.2.5 TPM2B_PUBLIC


manufacturer_certificates Optional

The TPM manufacturer’s endorsement key certificate chain. Endorsement key certificates are signed by the TPM manufacturer. When available, the EndorsementKeys.Info.manufacturer-certificates field will contain the TPM manufacturer’s endorsement key certificate chain.

if unset, the certificate chain is not available.


string
public_key Optional

The TPM public endorsement key in PEM format. if unset, the PEM format public key could not be determined.


string
certificate Optional

The TPM endorsement key certificate in PEM format. if unset, the certificate cannot be retrieved from the TPM.


string
manufacturer_certificate_uri Optional

The TPM endorsement key issuer URL extracted from the TPM endorsement key certificate. if unset, the URI cannot be retrieved from the endorsement key certificate.

JSON Example

{
	"name": "string",
	"public_area": "string",
	"qualified_name": "string",
	"type": "RSA_2048"
}

Feedback

Was this page helpful?