Slide 1

Slide 2 Tony Mangefeste Senior Program Manager Microsoft Corporation SYS-462T Slide 3 Slide 4 Slide 5 Slide 6 Slide 7 TPM Slide 8 Slide 9 Slide 10 Slide 11 Slide 12 Slide 13 Slide 14 Windows 8 OS Loader UEFI BootBoot Policy 1 1 3 rd -Party Software Windows Kernel ELAM Software AM Policy Windows Logon 2 2 Anti- Malware Client Attestation Service Healthy? Quote 4 4 TPM 3 3 Slide 15 Slide 16 Encrypted OS Volume TPM PIN 1 1 Key Request Client Key Windows 8 WDS Server Native UEFI Boot UEFI DHCP 4 or 6 TPM Encrypted OS Volume 2 2 Slide 17 Slide 18 TPM Slide 19 Slide 20 Not Ready Disabled Deactivated Ownership Not Taken Not Ready Ownership Not Taken Provisioning Flag = True Slide 21 TPM-Based App Runs Is TPM State Ready ? App Uses the TPM Yes App Launches OS Wizard Administrator Interaction Clear TPM (If necessary) No Slide 22 Slide 23 Direct TPM Commands Existing TPM 1.2 Apps TPM 1.2 Microsoft TPM Stack TPM 2.0 Microsoft TPM Stack Key Storage Provider TPM Application for Windows 8 Windows Internal TPM 1.2 or TPM 2.0 Abstraction Layer (RSA & SHA-1) TPM Provisioning TPM Virtual Smart Card Slide 24 Slide 25 Slide 26 Slide 27